amorfo77/sogo
1
0 Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-10-19 18:18:12 +00:00
Code Issues Projects Releases Wiki Activity

fix(vulnerability): properly change the totp code after disabling it

Browse Source
This commit is contained in:
Hivert Quentin committed 2026-02-25 15:23:57 +01:00
1 parent e821b20f87
commit 83d4c522f8
6 files changed
+138 -11
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

UI/PreferencesUI/UIxPreferences.m
+2 -2
View File
@@ -1123,7 +1123,7 @@ static NSArray *reminderValues = nil;
- (NSString *) totpKey
{
return [[context activeUser] totpKey];
return [[context activeUser] totpKey: NO];
}
//
@@ -1910,7 +1910,7 @@ static NSArray *reminderValues = nil;
const auto time_step = OATH_TOTP_DEFAULT_TIME_STEP_SIZE;
const auto digits = 6;
real_secret = [[user totpKey] UTF8String];
real_secret = [[user totpKey: YES] UTF8String];
auto result = oath_init();
auto t = time(NULL);