BUILD : 1.7.3 (170) BUGS : 86 NOTES : Buffer initialization for encrypted MySQL passwords.

git-svn-id: svn://svn.anope.org/anope/trunk@170 31f1291d-b8d6-0310-a050-a5561fc1590b


git-svn-id: http://anope.svn.sourceforge.net/svnroot/anope/trunk@118 5417fbe8-f217-4b02-8779-1006273d7864

3 files changed, 9 insertions, 1 deletions

diff --git a/Changes b/Changes
index 975e375cb..d0260ea06 100644
--- a/Changes
+++ b/Changes
@@ -6,6 +6,7 @@ Provided by Anope Dev. <dev@anope.org> - 2004
 05/24 A New NSNickTracking directive to provide nick tracking.            [ #71]
 05/21 A Auto enforce upon AKICK addition.                                 [ #63]
 05/21 A New file docs/OLDCHANGES contains all change history.             [ #65]
+06/04 F Buffer initialization for encrypted MySQL passwords.              [ #86]
 06/04 F Rewrite of del_exception() fixing segfault and memory leak.       [ #78]
 06/04 F MemoServ send limit does no longer apply for services operators.  [ #84]
 06/03 F Reversed pthread library detection order on ./configure script.   [ #67]
diff --git a/mysql.c b/mysql.c
index ccd75b69d..4479596bc 100644
--- a/mysql.c
+++ b/mysql.c
@@ -218,6 +218,9 @@ char *db_mysql_secure(char *pass)
 
     char epass[BUFSIZE];
 
+    /* Initialize the buffer. Bug #86 */
+    memset(epass, '\0', BUFSIZE);
+
 #ifdef USE_ENCRYPTION
     /* If we use the builtin encryption don't double encrypt! */
     snprintf(epass, sizeof(epass), "'%s'", pass);
diff --git a/version.log b/version.log
index 9c3cb3b3b..d4e33518a 100644
--- a/version.log
+++ b/version.log
@@ -8,10 +8,14 @@
 VERSION_MAJOR="1"
 VERSION_MINOR="7"
 VERSION_PATCH="3"
-VERSION_BUILD="169"
+VERSION_BUILD="170"
 
 # $Log$
 #
+# BUILD : 1.7.3 (170)
+# BUGS  : 86
+# NOTES : Buffer initialization for encrypted MySQL passwords.
+#
 # BUILD : 1.7.3 (169)
 # BUGS  : 78
 # NOTES : Rewrite of del_exception() fixing segfault and memory leak