amorfo77/sogo
1
0
Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-08-03 06:02:17 +00:00
Code Issues Projects Releases Wiki Activity

fix(vulnerability): properly change the totp code after disabling it

Browse Source
This commit is contained in:
Hivert Quentin
2026-02-25 15:23:57 +01:00
parent e821b20f87
commit 83d4c522f8
6 changed files with 138 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
UI/PreferencesUI/UIxPreferences.m
+2 -2
View File
@@ -1123,7 +1123,7 @@ static NSArray *reminderValues = nil;
- (NSString *) totpKey
{
return [[context activeUser] totpKey];
return [[context activeUser] totpKey: NO];
}
//
@@ -1910,7 +1910,7 @@ static NSArray *reminderValues = nil;
const auto time_step = OATH_TOTP_DEFAULT_TIME_STEP_SIZE;
const auto digits = 6;
real_secret = [[user totpKey] UTF8String];
real_secret = [[user totpKey: YES] UTF8String];
auto result = oath_init();
auto t = time(NULL);