dovecot-1.3: digest-md5: If client sent no input, log it as such...

dovecot at dovecot.org dovecot at dovecot.org
Thu Apr 9 21:44:32 EEST 2009


details:   http://hg.dovecot.org/dovecot-1.3/rev/25cf5d5b3d9c
changeset: 9048:25cf5d5b3d9c
user:      Timo Sirainen <tss at iki.fi>
date:      Thu Apr 09 14:44:02 2009 -0400
description:
digest-md5: If client sent no input, log it as such instead of a more cryptic error.

diffstat:

1 file changed, 5 insertions(+)
src/auth/mech-digest-md5.c |    5 +++++

diffs (15 lines):

diff -r 99659fef12b2 -r 25cf5d5b3d9c src/auth/mech-digest-md5.c
--- a/src/auth/mech-digest-md5.c	Wed Apr 08 16:45:42 2009 -0400
+++ b/src/auth/mech-digest-md5.c	Thu Apr 09 14:44:02 2009 -0400
@@ -472,6 +472,11 @@ static bool parse_digest_response(struct
 	*error = NULL;
 	failed = FALSE;
 
+	if (size == 0) {
+		*error = "Client sent no input";
+		return FALSE;
+	}
+
 	copy = t_strdup_noconst(t_strndup(data, size));
 	while (*copy != '\0') {
 		if (parse_next(&copy, &key, &value)) {


More information about the dovecot-cvs mailing list