Ensure the login information is null-terminated.

This commit is contained in:
default 2022-10-04 11:55:48 +02:00
parent 1791e05346
commit f521285d75

7
html.c
View file

@ -132,7 +132,12 @@ int login(snac *snac, char *headers)
int sz;
xs *s1 = xs_crop(xs_dup(auth), 6, 0);
xs *s2 = xs_base64_dec(s1, &sz);
xs *l1 = xs_split_n(s2, ":", 1);
/* copy to asciiz it */
xs *s3 = calloc(sz + 1, 1);
memcpy(s3, s2, sz);
xs *l1 = xs_split_n(s3, ":", 1);
if (xs_list_len(l1) == 2) {
logged_in = check_password(