From 0c0aad1de09db9a2152855ebaa867dfe07745808 Mon Sep 17 00:00:00 2001 From: Stephen Paul Weber Date: Tue, 31 Oct 2023 09:21:41 -0500 Subject: [PATCH] Do not crash when getting invalid string for scram --- .../java/eu/siacs/conversations/crypto/sasl/ScramMechanism.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/eu/siacs/conversations/crypto/sasl/ScramMechanism.java b/src/main/java/eu/siacs/conversations/crypto/sasl/ScramMechanism.java index e5708e504dedd8a46c4f2f9f1f7dd51e1d1421d8..b3c36cda6f8890e7bcf276d728952d4ffcd271eb 100644 --- a/src/main/java/eu/siacs/conversations/crypto/sasl/ScramMechanism.java +++ b/src/main/java/eu/siacs/conversations/crypto/sasl/ScramMechanism.java @@ -151,7 +151,7 @@ abstract class ScramMechanism extends SaslMechanism { int iterationCount = -1; String salt = ""; for (final String token : tokenizer) { - if (token.charAt(1) == '=') { + if (token.length() > 1 && token.charAt(1) == '=') { switch (token.charAt(0)) { case 'i': try {