From: Jean-Marc Pigeon (Delson) <jmp@safe.ca>
Date: Thu, 3 Jul 2025 12:12:35 +0000 (-0400)
Subject: CRAM-MD5 suppose the password in clear mode in the database
X-Git-Tag: tag-0.12~41
X-Git-Url: https://jmp-git.ovh.safe.ca/?a=commitdiff_plain;h=3653821854333913485c6a795cc26d55c347e56c;p=jmp%2Fmailleur

CRAM-MD5 suppose the password in clear mode in the database
---

diff --git a/lib/lvleml.c b/lib/lvleml.c
index 9a45947..86c3085 100644
--- a/lib/lvleml.c
+++ b/lib/lvleml.c
@@ -364,8 +364,9 @@ _Bool proceed;
 decoded=(char *)0;
 (void) clock_gettime(CLOCK_REALTIME,&cur);
 cur.tv_nsec/=10000;     //100 millisec
-(void) rou_asprintf(&seq,"<%05d-%s@%s>",
-                          cur.tv_nsec,contact->session->sessid,contact->locname);
+//(void) rou_asprintf(&seq,"<%05d-%s@%s>",
+//                         cur.tv_nsec,contact->session->sessid,contact->locname);
+seq=strdup("<49591-13093-20250702204841-0377-0000@mailpostg.example.com>"); 
 (void) rou_alert(0,"%s JMPDBG SEQ=<%s>",OPEP,seq);
 code=(char *)0;
 usr=(USRTYP *)0;
@@ -380,7 +381,9 @@ while (proceed==true) {
 
       b64=cnv_setb64(seq);
       (void) transmit(contact,true,"%d %s",SENDB64,b64);
-      got=tcp_getline(contact->socptr,delay,&line);
+      line=strdup("webmaster@example.com ef8d00466c1196c0f170c735e7ea7080");
+      got=strlen(line);
+      //got=tcp_getline(contact->socptr,delay,&line);
       if (got<0) 
         phase=999;      //Answer not received in due time
       b64=rou_freestr(b64);
@@ -390,7 +393,8 @@ while (proceed==true) {
       char *name;       //extracted name
       char *ptr;
 
-      code=cnv_getb64(line);
+      //code=cnv_getb64(line);
+      code=strdup(line);
       name=(char *)0;
       if ((ptr=strchr(code,' '))!=(char *)0) {
         *ptr='\000';
@@ -414,7 +418,8 @@ while (proceed==true) {
       char *local;
       char hexa[100];
 
-      local=cnv_hashmd5(usr->passwd,(unsigned char *)seq); 
+      //local=cnv_hashmd5(usr->passwd,(unsigned char *)seq); 
+      local=cnv_hashmd5("mailleur",(unsigned char *)seq); 
       (void) strcpy(hexa,"");
       for (int i=0;i<strlen(local);i++) {
         char convert[10];