Commit da6a5f6e authored by unknown's avatar unknown
Browse files

sql/password.c: check for buffer overflow in check_scramble_323 (BUG#7187) 


sql/password.c:
  check for buffer overflow in check_scramble_323
parent 14a81914

sql/password.c

+3 −2
Original line number Diff line number Diff line
@@ -216,7 +216,8 @@ check_scramble_323(const char *scrambled, const char *message, 
  randominit(&rand_st,hash_pass[0] ^ hash_message[0],

             hash_pass[1] ^ hash_message[1]);

  to=buff;

  for (pos=scrambled ; *pos ; pos++)

  DBUG_ASSERT(sizeof(buff) > SCRAMBLE_LENGTH_323);

  for (pos=scrambled ; *pos && to < buff+sizeof(buff) ; pos++)

    *to++=(char) (floor(my_rnd(&rand_st)*31)+64);

  if (pos-scrambled != SCRAMBLE_LENGTH_323)

    return 1;