mirror of
https://github.com/TrinityCore/TrinityCore.git
synced 2026-01-19 00:48:56 +01:00
Core/Auth: Per SRP6a protocol, terminate connection of A % N == 0. This resolves another authentication bypass issue
(cherry picked from commit cmangos/mangos-wotlk@ea3e08a812)
This commit is contained in:
@@ -479,7 +479,7 @@ bool AuthSession::HandleLogonProof()
|
||||
A.SetBinary(logonProof->A, 32);
|
||||
|
||||
// SRP safeguard: abort if A == 0
|
||||
if (A.IsZero())
|
||||
if ((A % N).IsZero())
|
||||
return false;
|
||||
|
||||
SHA1Hash sha;
|
||||
|
||||
Reference in New Issue
Block a user