Bugfix in SvxReflector authentication code. Upgrade immediately.

If you are running an SvxReflector server you should upgrade
immediately.

Author: sm0svx

src/doc/README-19.09.2.adoc

@@ -0,0 +1,4 @@
+SvxLink release 19.09.2 -- 10 Mar 2021
+--------------------------------------
+This is a hotfix release fixing a bug in the SvxReflector authentication code.
+If you are running a SvxReflector server you should upgrade immediately.

src/svxlink/ChangeLog

@@ -1,3 +1,10 @@
+ 1.7.0-1 -- 10 Mar 2021
+------------------------
+
+* Bugfix in SvxReflector authentication code. Upgrade immediately.
+
+
+
  1.7.0 -- 01 Sep 2019
 ----------------------
 * MetarInfo now supports secure http (https) since aviationweather.gov has 

src/svxlink/reflector/ReflectorClient.cpp

@@ -369,7 +369,7 @@ void ReflectorClient::handleMsgAuthResponse(std::istream& is)
   }
 
   string auth_key = lookupUserKey(msg.callsign());
-  if (msg.verify(auth_key, m_auth_challenge))
+  if (!auth_key.empty() && msg.verify(auth_key, m_auth_challenge))
   {
     vector<string> connected_nodes;
     m_reflector->nodeList(connected_nodes);

src/versions

@@ -1,5 +1,5 @@
 # Project release version
-PROJECT=19.09
+PROJECT=19.09.2
 
 # Version for the Qtel application
 QTEL=1.2.4
@@ -37,4 +37,4 @@ DEVCAL=1.0.2
 SVXSERVER=0.0.6
 
 # Version for SvxReflector
-SVXREFLECTOR=1.0.1
+SVXREFLECTOR=1.0.2