Software / code / prosody
Changeset
3076:d19b2db64496
util.sasl.scram: Fix in nonce check of client-final-message.
| author | Tobias Markmann <tm@ayena.de> |
|---|---|
| date | Sat, 22 May 2010 13:59:58 +0200 |
| parents | 3075:39a86b0d108b |
| children | 3077:3ee311f21d54 |
| files | util/sasl/scram.lua |
| diffstat | 1 files changed, 2 insertions(+), 2 deletions(-) [+] |
line wrap: on
line diff
--- a/util/sasl/scram.lua Sat May 22 13:58:15 2010 +0200 +++ b/util/sasl/scram.lua Sat May 22 13:59:58 2010 +0200 @@ -162,8 +162,8 @@ return "failure", "malformed-request", "Missing an attribute(p, r or c) in SASL message."; end - if self.state.nonce ~= self.state.servernonce then - return "failure", "malformed-request", "Wrong nonce in client-second-message."; + if self.state.nonce ~= self.state.clientnonce..self.state.servernonce then + return "failure", "malformed-request", "Wrong nonce in client-final-message."; end local SaltedPassword = self.state.salted_password;
