Merge pull request #578 from quanah/issue545

Fixes #545 -- Correctly return BADAUTH on incorrect password
cyrusimap · Aug 9, 2019 · afef6f4 · afef6f4
2 parents ea128c6 + dd01481
commit afef6f4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/plugins/scram.c b/plugins/scram.c
@@ -1431,7 +1431,7 @@ scram_server_mech_step2(server_context_t *text,
     for (k = 0; k < hash_size; k++) {
 	if (CalculatedStoredKey[k] != text->StoredKey[k]) {
 	    SETERROR(sparams->utils, "StoredKey mismatch");
-	    result = SASL_BADPROT;
+	    result = SASL_BADAUTH;
 	    goto cleanup;
 	}
     }