dovecot-1.1: digest-md5: If client sent no input, log it as such...

dovecot at dovecot.org dovecot at dovecot.org
Thu Apr 9 21:44:51 EEST 2009


details:   http://hg.dovecot.org/dovecot-1.1/rev/9a41173d0b75
changeset: 8237:9a41173d0b75
user:      Timo Sirainen <tss at iki.fi>
date:      Thu Apr 09 14:44:02 2009 -0400
description:
digest-md5: If client sent no input, log it as such instead of a more cryptic error.

diffstat:

1 file changed, 5 insertions(+)
src/auth/mech-digest-md5.c |    5 +++++

diffs (15 lines):

diff -r c91b73564611 -r 9a41173d0b75 src/auth/mech-digest-md5.c
--- a/src/auth/mech-digest-md5.c	Wed Apr 08 13:46:38 2009 -0400
+++ b/src/auth/mech-digest-md5.c	Thu Apr 09 14:44:02 2009 -0400
@@ -472,6 +472,11 @@ static bool parse_digest_response(struct
 	*error = NULL;
 	failed = FALSE;
 
+	if (size == 0) {
+		*error = "Client sent no input";
+		return FALSE;
+	}
+
 	copy = t_strdup_noconst(t_strndup(data, size));
 	while (*copy != '\0') {
 		if (parse_next(&copy, &key, &value)) {


More information about the dovecot-cvs mailing list