Bug#400955: base 64 decode problems

Michele Baldessari michele at pupazzo.org
Tue Dec 5 10:07:25 CET 2006


* Fabian Fagerholm (fabbe at paniq.net) wrote:
> On Tue, 2006-12-05 at 09:59 +0200, Fabian Fagerholm wrote:
> > Thanks for the report Michele, I'm marking this as found and I'm
> > starting to investigate. (I was able to reproduce the bug as you
> > showed.)
> 
> Apparently the input string can be terminated by just a single LF. I
> presume that in some circumstances, it could be terminated by a single
> CR, as well.
> 
> The attached patch covers these cases.
> 
> Note that the actual base64 decoding works just fine. These errors arise
> because sasl_decode64 assumes that the input data is strictly and only
> the base64-encoded data, without any line terminators, while client
> programs expect line terminators to be silently ignored.
> 
> A more "correct" fix would be to have all client programs strip off line
> terminators before calling sasl_decode64, but that's just not
> practically possible to achieve right now.

Hi Fabian,

(remind me to check mail *before* looking at things. sorry for the spam)
Yes, your patch works for me ;) Please close this report on the next
upload.

thanks for your time,
Michele
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20061205/eb2fb4bd/attachment.pgp


More information about the Pkg-cyrus-sasl2-debian-devel mailing list