Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | In-depth fix for to64frombits() BASE64 encoder buffer sizing. | Matthias Andree | 2018-04-14 | 1 | -2/+2 |
| | |||||
* | Fix compiler warnings. | Matthias Andree | 2012-08-14 | 1 | -4/+8 |
| | |||||
* | Validate NTLM challenge fields. | Matthias Andree | 2012-08-14 | 1 | -1/+19 |
| | | | | | This is to avoid reading from bad locations, and possibly conveying confidential data. Credit to Nico Golde. | ||||
* | Fix crash: Handle invalid base64 in NTLM challenge. | Matthias Andree | 2012-08-13 | 1 | -1/+8 |
| | | | | | | | | | | | | | | Some servers, for instance the MS Exchange servers deployed by the US-American National Aeronautics and Space Administration (NASA), aborted the NTLM protocol exchange after receiving the initial request. Fetchmail did not detect that there was an error message, rather than NTLM protocol exchange, and caught a segmentation fault while reading from a bad location. Detect base64 decoding errors, and return PS_AUTHFAIL in this case. Reported by J[ames] Porter Clark. | ||||
* | Return proper PS_AUTHFAIL if we don't get the right SASL challenge. | Matthias Andree | 2010-10-09 | 1 | -0/+1 |
| | |||||
* | NTLM: cancel properly in case of failure. | Matthias Andree | 2010-10-09 | 1 | -4/+17 |
| | |||||
* | Factor out common NTLM code. | Matthias Andree | 2010-10-09 | 1 | -0/+74 |