File tree Expand file tree Collapse file tree 2 files changed +9
-2
lines changed Expand file tree Collapse file tree 2 files changed +9
-2
lines changed Original file line number Diff line number Diff line change @@ -23,6 +23,10 @@ PHP NEWS
23
23
. Fix use-of-uninitialized-value in hash_pbkdf2(), fix missing $options
24
24
parameter in signature. (ilutov)
25
25
26
+ - MySQLnd:
27
+ . Fixed bug GH-11440 (authentication to a sha256_password account fails over
28
+ SSL). (nielsdos)
29
+
26
30
- Opcache:
27
31
. Fixed bug GH-11715 (opcache.interned_strings_buffer either has no effect or
28
32
opcache_get_status() / phpinfo() is wrong). (nielsdos)
Original file line number Diff line number Diff line change @@ -912,9 +912,12 @@ mysqlnd_sha256_auth_get_auth_data(struct st_mysqlnd_authentication_plugin * self
912
912
if (conn -> vio -> data -> ssl ) {
913
913
DBG_INF ("simple clear text under SSL" );
914
914
/* clear text under SSL */
915
- * auth_data_len = passwd_len ;
916
- ret = malloc (passwd_len );
915
+ /* NUL termination byte required: https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_connection_phase_authentication_methods_clear_text_password.html
916
+ * (this is similar to bug #78680, but now as GH-11440) */
917
+ * auth_data_len = passwd_len + 1 ;
918
+ ret = malloc (passwd_len + 1 );
917
919
memcpy (ret , passwd , passwd_len );
920
+ ret [passwd_len ] = '\0' ;
918
921
} else {
919
922
* auth_data_len = 0 ;
920
923
server_public_key = mysqlnd_sha256_get_rsa_key (conn , session_options , pfc_data );
You can’t perform that action at this time.
0 commit comments