Changeset 225 for trunk/src/sh_forward.c

Timestamp:

Mar 4, 2009, 11:39:50 PM (16 years ago)

Author:

katerina

Message:

Fix for ticket #150 (flawed input verification in SRP). Release 2.5.4

File:

• trunk/src/sh_forward.c (modified) (2 diffs)

trunk/src/sh_forward.c

@@ -1200 +1200 @@
                       /* --- Now send H(A,B,H(Sc)) and check. --- 
                        */
-                      if (foo_Sc != NULL)
+                      if (foo_Sc != NULL && 0 == sh_srp_check_zero (foo_Sc))
                         {
                           sh_srp_M(foo_A, 
@@ -4157 +4157 @@
                                        conn->A, 
                                        conn->client_entry->verifier);
-                  if (foo_Ss == NULL)
+
+                  if (foo_Ss == NULL || 0 != sh_srp_check_zero (foo_Ss))
                     {
                       status_update (conn->client_entry, CLT_FAILED);