TLS-PSK Username bug

Stephen Hurd <[email protected]> Fri, 22 Aug 2014 03:26:30 -0700

Newsgroups	gmane.comp.encryption.cryptlib
Message-ID	<[email protected]>

session/ssl_cli.c has a bug where it uses the password as the username...

line 1345 should be CRYPT_SESSINFO_USERNAME, not CRYPT_SESSINFO_PASSWORD
(patch attached)

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

cl-tls-psk-userfix.patch (text/x-diff, 433 B)

--- session/ssl_cli.c.orig	2014-08-22 03:20:26.000000000 -0700
+++ session/ssl_cli.c	2014-08-22 03:20:53.000000000 -0700
@@ -1342,7 +1342,7 @@
 										 CRYPT_SESSINFO_PASSWORD );
 			const ATTRIBUTE_LIST *userNamePtr = \
 						findSessionInfo( sessionInfoPtr->attributeList,
-										 CRYPT_SESSINFO_PASSWORD );
+										 CRYPT_SESSINFO_USERNAME );
 
 			REQUIRES( passwordPtr != NULL );
 			REQUIRES( userNamePtr != NULL );