From d4503fdf28312296dba20df0b3363455e934d8ba Mon Sep 17 00:00:00 2001 From: jesopo Date: Tue, 5 Feb 2019 12:53:19 +0000 Subject: [PATCH] Remove SCRAM-related variables on IRCServer object when we see server-final-message (sasl.py) --- modules/sasl.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/modules/sasl.py b/modules/sasl.py index 362a5b0d..ed4faabf 100644 --- a/modules/sasl.py +++ b/modules/sasl.py @@ -114,6 +114,10 @@ class Module(ModuleManager.BaseModule): server_signature = hmac.digest(server_key, auth_message, algo) + del event["server"]._scram_first + del event["server"]._scram_salted_password + del event["server"]._scram_auth_message + if server_signature != base64.b64decode(verifier): raise ValueError("SCRAM %s authentication failed " % algo)