dovecot-2.2: auth: Fixed assert-crash with auth_verbose_password...

dovecot at dovecot.org dovecot at dovecot.org
Sat Oct 26 18:07:52 EEST 2013


details:   http://hg.dovecot.org/dovecot-2.2/rev/8a8e63a351f5
changeset: 16882:8a8e63a351f5
user:      Timo Sirainen <tss at iki.fi>
date:      Sat Oct 26 18:06:26 2013 +0300
description:
auth: Fixed assert-crash with auth_verbose_passwords!=no and 32bit systems.
t_strndup() assert-crashed with size=UINT_MAX parameter.

diffstat:

 src/auth/auth-request.c |  2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diffs (12 lines):

diff -r e5bb04fe417b -r 8a8e63a351f5 src/auth/auth-request.c
--- a/src/auth/auth-request.c	Thu Oct 24 16:21:10 2013 +0300
+++ b/src/auth/auth-request.c	Sat Oct 26 18:06:26 2013 +0300
@@ -1781,7 +1781,7 @@
 auth_request_append_password(struct auth_request *request, string_t *str)
 {
 	const char *p, *log_type = request->set->verbose_passwords;
-	unsigned int max_len = UINT_MAX;
+	unsigned int max_len = 1024;
 
 	p = strchr(log_type, ':');
 	if (p != NULL) {


More information about the dovecot-cvs mailing list