#2437 disable keychain access when passwords are being sent as cleartext

sequelpro · Mar 3, 2017 · 9c5357a28e27b74a6df7bfeeb24015073d5993e5 · 9c5357a
1 parent fc4ff91
commit 9c5357a28e27b74a6df7bfeeb24015073d5993e5
Unified Split

Showing with 17 additions and 0 deletions.

+17 −0 Source/SPKeychain.m
diff --git a/Source/SPKeychain.m b/Source/SPKeychain.m
@@ -38,6 +38,23 @@

 @implementation SPKeychain

+- (id)init
+{
+	if (!(self = [super init])) {
+		return nil;
+	}
+	
+	NSString *cleartext = [NSProcessInfo processInfo].environment[@"LIBMYSQL_ENABLE_CLEARTEXT_PLUGIN"];
+	if (cleartext != nil) {
+		NSLog(@"LIBMYSQL_ENABLE_CLEARTEXT_PLUGIN is set. Disabling keychain access. See Issue #2437");
+		
+		[self release];
+		return nil;
+	}
+	
+	return self;
+}
+
 /**
 * Add the supplied password to the user's Keychain using the supplied name and account.
 */