From 3653821854333913485c6a795cc26d55c347e56c Mon Sep 17 00:00:00 2001 From: "Jean-Marc Pigeon (Delson)" Date: Thu, 3 Jul 2025 08:12:35 -0400 Subject: [PATCH] CRAM-MD5 suppose the password in clear mode in the database --- lib/lvleml.c | 15 ++++++++++----- 1 file changed, 10 insertions(+), 5 deletions(-) diff --git a/lib/lvleml.c b/lib/lvleml.c index 9a45947..86c3085 100644 --- a/lib/lvleml.c +++ b/lib/lvleml.c @@ -364,8 +364,9 @@ _Bool proceed; decoded=(char *)0; (void) clock_gettime(CLOCK_REALTIME,&cur); cur.tv_nsec/=10000; //100 millisec -(void) rou_asprintf(&seq,"<%05d-%s@%s>", - cur.tv_nsec,contact->session->sessid,contact->locname); +//(void) rou_asprintf(&seq,"<%05d-%s@%s>", +// cur.tv_nsec,contact->session->sessid,contact->locname); +seq=strdup("<49591-13093-20250702204841-0377-0000@mailpostg.example.com>"); (void) rou_alert(0,"%s JMPDBG SEQ=<%s>",OPEP,seq); code=(char *)0; usr=(USRTYP *)0; @@ -380,7 +381,9 @@ while (proceed==true) { b64=cnv_setb64(seq); (void) transmit(contact,true,"%d %s",SENDB64,b64); - got=tcp_getline(contact->socptr,delay,&line); + line=strdup("webmaster@example.com ef8d00466c1196c0f170c735e7ea7080"); + got=strlen(line); + //got=tcp_getline(contact->socptr,delay,&line); if (got<0) phase=999; //Answer not received in due time b64=rou_freestr(b64); @@ -390,7 +393,8 @@ while (proceed==true) { char *name; //extracted name char *ptr; - code=cnv_getb64(line); + //code=cnv_getb64(line); + code=strdup(line); name=(char *)0; if ((ptr=strchr(code,' '))!=(char *)0) { *ptr='\000'; @@ -414,7 +418,8 @@ while (proceed==true) { char *local; char hexa[100]; - local=cnv_hashmd5(usr->passwd,(unsigned char *)seq); + //local=cnv_hashmd5(usr->passwd,(unsigned char *)seq); + local=cnv_hashmd5("mailleur",(unsigned char *)seq); (void) strcpy(hexa,""); for (int i=0;i