Fix | TdsParser.ProcessSSPI clear receivedBuff array after negTokenRe…

…sp retrieval
dotnet · Apr 9, 2024 · 1e68c5b · 1e68c5b
1 parent bc2a834
commit 1e68c5b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/Microsoft.Data.SqlClient/src/Microsoft/Data/SqlClient/TdsParser.cs b/src/Microsoft.Data.SqlClient/src/Microsoft/Data/SqlClient/TdsParser.cs
@@ -25,6 +25,8 @@ internal void ProcessSSPI(int receivedLength)
                 throw SQL.SynchronousCallMayNotPend();
             }
 
+            receivedBuff.AsSpan(receivedLength, receivedBuff.Length - receivedLength).Clear();
+
             // allocate send buffer and initialize length
             byte[] rentedSendBuff = ArrayPool<byte>.Shared.Rent((int)_authenticationProvider!.MaxSSPILength);
             byte[] sendBuff = rentedSendBuff; // need to track these separately in case someone updates the ref parameter