github-repos/wget
1
0
Fork 0
mirror of https://github.com/mirror/wget.git synced 2025-03-25 01:00:13 +08:00
Code Issues Packages Projects Releases Wiki Activity

* src/http-ntlm.c (mkhash): Fix read buffer overflow

Browse Source
This commit is contained in:
Tim Rühsen 2020-03-06 11:37:57 +01:00
parent 7c017e604c
commit fe5fbdd947
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/http-ntlm.c
View File

@ -307,21 +307,26 @@ mkhash(const char *password,
MD4_CTX MD4;
#endif
unsigned char pw4[64];
len = strlen (password);
if (len > sizeof (pw4) / 2)
len = sizeof (pw4) / 2;
for (i = 0; i < len; i++) {
pw[2 * i] = (unsigned char) password[i];
pw[2 * i + 1] = 0;
pw4[2 * i] = (unsigned char) password[i];
pw4[2 * i + 1] = 0;
}
#ifdef HAVE_NETTLE
nettle_md4_init(&MD4);
nettle_md4_update(&MD4, (unsigned) (2 * len), pw);
nettle_md4_update(&MD4, (unsigned) (2 * len), pw4);
nettle_md4_digest(&MD4, MD4_DIGEST_SIZE, ntbuffer);
#else
/* create NT hashed password */
MD4_Init(&MD4);
MD4_Update(&MD4, pw, 2*len);
MD4_Update(&MD4, pw4, 2 * len);
MD4_Final(ntbuffer, &MD4);
#endif