| Message ID | 20200326172332.2356-2-arne@rfc2549.org |
|---|---|
| State | Accepted |
| Headers |
Return-Path: <openvpn-devel-bounces@lists.sourceforge.net> Delivered-To: patchwork@openvpn.net Delivered-To: patchwork@openvpn.net Received: from director9.mail.ord1d.rsapps.net ([172.30.191.6]) by backend30.mail.ord1d.rsapps.net with LMTP id KLwdK1rlfF5BOgAAIUCqbw for <patchwork@openvpn.net>; Thu, 26 Mar 2020 13:24:42 -0400 Received: from proxy6.mail.ord1d.rsapps.net ([172.30.191.6]) by director9.mail.ord1d.rsapps.net with LMTP id +KH5KlrlfF46WgAAalYnBA ; Thu, 26 Mar 2020 13:24:42 -0400 Received: from smtp29.gate.ord1d ([172.30.191.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by proxy6.mail.ord1d.rsapps.net with LMTP id yBSAKlrlfF6QXgAAQyIf0w ; Thu, 26 Mar 2020 13:24:42 -0400 X-Spam-Threshold: 95 X-Spam-Score: 0 X-Spam-Flag: NO X-Virus-Scanned: OK X-Orig-To: openvpnslackdevel@openvpn.net X-Originating-Ip: [216.105.38.7] Authentication-Results: smtp29.gate.ord1d.rsapps.net; iprev=pass policy.iprev="216.105.38.7"; spf=pass smtp.mailfrom="openvpn-devel-bounces@lists.sourceforge.net" smtp.helo="lists.sourceforge.net"; dkim=fail (signature verification failed) header.d=sourceforge.net; dkim=fail (signature verification failed) header.d=sf.net; dmarc=none (p=nil; dis=none) header.from=rfc2549.org X-Suspicious-Flag: YES X-Classification-ID: acfc798c-6f86-11ea-8e05-525400f257a9-1-1 Received: from [216.105.38.7] ([216.105.38.7:37856] helo=lists.sourceforge.net) by smtp29.gate.ord1d.rsapps.net (envelope-from <openvpn-devel-bounces@lists.sourceforge.net>) (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384) id 8C/0B-30216-955EC7E5; Thu, 26 Mar 2020 13:24:41 -0400 Received: from [127.0.0.1] (helo=sfs-ml-4.v29.lw.sourceforge.com) by sfs-ml-4.v29.lw.sourceforge.com with esmtp (Exim 4.90_1) (envelope-from <openvpn-devel-bounces@lists.sourceforge.net>) id 1jHWEQ-0004e9-7l; Thu, 26 Mar 2020 17:23:50 +0000 Received: from [172.30.20.202] (helo=mx.sourceforge.net) by sfs-ml-4.v29.lw.sourceforge.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.90_1) (envelope-from <arne@kamera.blinkt.de>) id 1jHWEO-0004e1-LL for openvpn-devel@lists.sourceforge.net; Thu, 26 Mar 2020 17:23:48 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=References:In-Reply-To:Message-Id:Date:Subject:To: From:Sender:Reply-To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=Ceyk6OzJ853KzZ0kDaqxHi6A8/P5Klg3D/J/xPoAuhY=; b=iqav5OJJb4e1ojdCnokEsG7RSY 2AqYfE4ULAdeiH5QMwiWIz3seaARNGNcVLOEvUxehOD3t3OnzQGF4qHxijqQFsWyqbM+u74VIO7ZK nWFSGCOLNrSwcTei6AtYhcf1tyExydmqZpzX1GVu0VnUTl+89EzjuBU8l7jQnDbWH5hk=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=References:In-Reply-To:Message-Id:Date:Subject:To:From:Sender:Reply-To:Cc :MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=Ceyk6OzJ853KzZ0kDaqxHi6A8/P5Klg3D/J/xPoAuhY=; b=VRSg7E8TQR4NMvgiYL7FPP67LF W7CnTLaQESOnES40IF+5rf4InGZxvIGUReIQ+Cd5iA18xHaux0D7YxBP5QsfAJGwNKdoCtQBKf8t8 CXEf6HClR3WcK8GyCV8qDiyJYcFpPDftSqFirKLx0kgc3Bk1g0qij/U0+NOMZiLcIxnw=; Received: from mail.blinkt.de ([192.26.174.232]) by sfi-mx-1.v28.lw.sourceforge.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.92.2) id 1jHWEI-000nit-0C for openvpn-devel@lists.sourceforge.net; Thu, 26 Mar 2020 17:23:48 +0000 Received: from kamera.blinkt.de ([2001:638:502:390:20c:29ff:fec8:535c]) by mail.blinkt.de with smtp (Exim 4.92.3 (FreeBSD)) (envelope-from <arne@kamera.blinkt.de>) id 1jHWE8-000DaT-UQ for openvpn-devel@lists.sourceforge.net; Thu, 26 Mar 2020 18:23:32 +0100 Received: (nullmailer pid 2404 invoked by uid 10006); Thu, 26 Mar 2020 17:23:32 -0000 From: Arne Schwabe <arne@rfc2549.org> To: openvpn-devel@lists.sourceforge.net Date: Thu, 26 Mar 2020 18:23:31 +0100 Message-Id: <20200326172332.2356-2-arne@rfc2549.org> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20200326172332.2356-1-arne@rfc2549.org> References: <20200326172332.2356-1-arne@rfc2549.org> X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record X-Headers-End: 1jHWEI-000nit-0C Subject: [Openvpn-devel] [PATCH 2/3] [Auth-token] Fix session id in env missing first byte X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: <openvpn-devel.lists.sourceforge.net> List-Unsubscribe: <https://lists.sourceforge.net/lists/options/openvpn-devel>, <mailto:openvpn-devel-request@lists.sourceforge.net?subject=unsubscribe> List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum_name=openvpn-devel> List-Post: <mailto:openvpn-devel@lists.sourceforge.net> List-Help: <mailto:openvpn-devel-request@lists.sourceforge.net?subject=help> List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/openvpn-devel>, <mailto:openvpn-devel-request@lists.sourceforge.net?subject=subscribe> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox |
| Series |
[Openvpn-devel,1/3,Auth-token] Fix session id and initial timestamp not begin preserved
|
|
Commit Message
Arne Schwabe
March 26, 2020, 6:23 a.m. UTC
sizeof for a constant string return the size including the null byte. For copying the session id this meant that we do not copy the first byte. This made the session id reported to the external authenticator one byte shorter than it was indented to be. --- src/openvpn/auth_token.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
Comments
Your patch has been applied to the master branch. Haven't actually tested this in any server setup - but "this is your code, if you say this is the way it needs to be, it is, the explanation makes sense and the code change matches". An all other occurences use strlen() as well... So, Acked-by: Gert Doering <gert@greenie.muc.de> commit 42fe3e8175822a4cf2c85cc4ce3fdffd41d74455 Author: Arne Schwabe Date: Thu Mar 26 18:23:31 2020 +0100 Fix session id in env missing first byte Acked-by: Gert Doering <gert@greenie.muc.de> Message-Id: <20200326172332.2356-2-arne@rfc2549.org> URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg19622.html Signed-off-by: Gert Doering <gert@greenie.muc.de> -- kind regards, Gert Doering
diff --git a/src/openvpn/auth_token.c b/src/openvpn/auth_token.c index 6275299d..585679dc 100644 --- a/src/openvpn/auth_token.c +++ b/src/openvpn/auth_token.c @@ -121,7 +121,7 @@ add_session_token_env(struct tls_session *session, struct tls_multi *multi, */ char session_id[AUTH_TOKEN_SESSION_ID_LEN*2] = {0}; - memcpy(session_id, session_id_source + sizeof(SESSION_ID_PREFIX), + memcpy(session_id, session_id_source + strlen(SESSION_ID_PREFIX), AUTH_TOKEN_SESSION_ID_LEN*8/6); setenv_str(session->opt->es, "session_id", session_id);