Commit 546cea3f authored by Rafal Somla's avatar Rafal Somla

Bug#12982926 CLIENT CAN OVERRIDE ZERO-LENGTH-ALLOCATE BUFFER

Changes in client plugin needed for testing the issue (test instrumentation).
parent 0c775ea9
...@@ -161,6 +161,21 @@ int Handshake_client::write_packet(Blob &data) ...@@ -161,6 +161,21 @@ int Handshake_client::write_packet(Blob &data)
keep all the data. keep all the data.
*/ */
unsigned block_count= data.len()/512 + ((data.len() % 512) ? 1 : 0); unsigned block_count= data.len()/512 + ((data.len() % 512) ? 1 : 0);
#if !defined(DBUG_OFF) && defined(WINAUTH_USE_DBUG_LIB)
/*
For testing purposes, use wrong block count to see how server
handles this.
*/
DBUG_EXECUTE_IF("winauth_first_packet_test",{
block_count= data.len() == 601 ? 0 :
data.len() == 602 ? 1 :
block_count;
});
#endif
DBUG_ASSERT(block_count < (unsigned)0x100); DBUG_ASSERT(block_count < (unsigned)0x100);
saved_byte= data[254]; saved_byte= data[254];
data[254] = block_count; data[254] = block_count;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment