File tree Expand file tree Collapse file tree 1 file changed +5
-2
lines changed Expand file tree Collapse file tree 1 file changed +5
-2
lines changed Original file line number Diff line number Diff line change @@ -912,9 +912,12 @@ mysqlnd_sha256_auth_get_auth_data(struct st_mysqlnd_authentication_plugin * self
912
912
if (conn -> vio -> data -> ssl ) {
913
913
DBG_INF ("simple clear text under SSL" );
914
914
/* clear text under SSL */
915
- * auth_data_len = passwd_len ;
916
- ret = malloc (passwd_len );
915
+ /* NUL termination byte required: https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_connection_phase_authentication_methods_clear_text_password.html
916
+ * (this is similar to bug #78680, but now as GH-11440) */
917
+ * auth_data_len = passwd_len + 1 ;
918
+ ret = malloc (passwd_len + 1 );
917
919
memcpy (ret , passwd , passwd_len );
920
+ ret [passwd_len ] = '\0' ;
918
921
} else {
919
922
* auth_data_len = 0 ;
920
923
server_public_key = mysqlnd_sha256_get_rsa_key (conn , session_options , pfc_data );
You can’t perform that action at this time.
0 commit comments