read = SSL_read(ssl, reply, sizeof(reply));
 strcpy (reply, "encoded_base64_password\n");
 SSL_write (ssl, reply, strlen (reply));
 read = SSL_read(ssl, reply, sizeof(reply));
 strcpy (reply, "MAIL FROM: <[EMAIL PROTECTED]>\n");
 SSL_write (ssl, reply, strlen (reply));

        All of the SSL_read lines are broken. There is no check to make sure an
entire line has been read. The net effect is that you cannot later figure
out what happened when you need to get a final reply from the server, and
you blindly continue sending stuff past an early error.

        DS


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to