summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEduardo Chappa <chappa@washington.edu>2021-04-29 20:18:26 -0600
committerEduardo Chappa <chappa@washington.edu>2021-04-29 20:18:26 -0600
commit653eeaa2ba5d7a539faf2e4fda32820d987a7c3a (patch)
treeaf22be41b5d064c80f590103623c0ed6eb3335c0
parentc8812ee61f137936edfff613f8c475e69326e6a7 (diff)
downloadalpine-653eeaa2ba5d7a539faf2e4fda32820d987a7c3a.tar.xz
* Crash in the ntlm authenticator when no domain was specified in the
username. Reported and fixed by Anders Skargren.
-rw-r--r--imap/src/c-client/auth_ntl.c4
-rw-r--r--pith/pine.hlp8
2 files changed, 10 insertions, 2 deletions
diff --git a/imap/src/c-client/auth_ntl.c b/imap/src/c-client/auth_ntl.c
index 7511303a..9f885469 100644
--- a/imap/src/c-client/auth_ntl.c
+++ b/imap/src/c-client/auth_ntl.c
@@ -1,5 +1,5 @@
/* ========================================================================
- * Copyright 2018-2020 Eduardo Chappa
+ * Copyright 2018-2021 Eduardo Chappa
* Copyright 2015 Imagination Technologies
* Copyright 1988-2008 University of Washington
*
@@ -78,7 +78,7 @@ long auth_ntlm_client (authchallenge_t challenger, authrespond_t responder,char
/* will override the domain requested with */
/* one returned by the challenge message */
sep = strchr (user, '\\');
- if (*sep) {
+ if (sep) {
dlen = sep - user;
ulen = strlen (sep + 1);
memcpy (ubuf, sep + 1, ulen);
diff --git a/pith/pine.hlp b/pith/pine.hlp
index 22f46004..d973a0ec 100644
--- a/pith/pine.hlp
+++ b/pith/pine.hlp
@@ -196,6 +196,14 @@ to add support for terminals that need lines to be deleted before being written.
on a collaboration with Professor Martin Trusler.
</UL>
+<P>
+Bugs addressed include:
+
+<UL>
+<LI> Crash in the ntlm authenticator when the user name does not include
+a domain. Reported and fixed by Anders Skargren.
+</UL>
+
<P> The changes in version <!--#echo var="ALPINE_VERSION"--> are as follows:
<P>