Core/Auth: Per SRP6a protocol, terminate connection of A % N == 0. This resolves another authentication bypass issue

(cherry picked from commit cmangos/mangos-wotlk@ea3e08a812)
This commit is contained in:
Shauren authored and Aokromes committed 2017-03-15 23:37:24 +01:00
1 parent 045307cd6e
commit 3f048ca5fa
1 file changed
+1 -1
+1 -1
View File
@@ -479,7 +479,7 @@ bool AuthSession::HandleLogonProof()
A.SetBinary(logonProof->A, 32);
// SRP safeguard: abort if A == 0
if (A.IsZero())
if ((A % N).IsZero())
return false;
SHA1Hash sha;