diff options
| author | Adam <Adam@anope.org> | 2014-10-16 21:38:46 -0400 |
|---|---|---|
| committer | Adam <Adam@anope.org> | 2014-10-16 21:38:46 -0400 |
| commit | b940077553a538a14519bd11207c96bfd7b5ae4e (patch) | |
| tree | 1fbd3cae418248f0f9b4fe496742c36d684498a1 /modules/extra/m_sasl_dh-aes.cpp | |
| parent | c8ded08b43a6fb3d4512370c33bc455e3c721feb (diff) | |
Validate credentials sent via sasl more
Diffstat (limited to 'modules/extra/m_sasl_dh-aes.cpp')
| -rw-r--r-- | modules/extra/m_sasl_dh-aes.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/extra/m_sasl_dh-aes.cpp b/modules/extra/m_sasl_dh-aes.cpp index d556e8502..f398dd45d 100644 --- a/modules/extra/m_sasl_dh-aes.cpp +++ b/modules/extra/m_sasl_dh-aes.cpp @@ -157,7 +157,7 @@ class DHAES : public Mechanism std::string username = &decrypted[0]; std::string password = &decrypted[username.length() + 1]; - if (username.empty() || password.empty()) + if (username.empty() || password.empty() || !IRCD->IsNickValid(username) || password.find_first_of("\r\n") != Anope::string::npos) return Err(sess, pubkey); SASL::IdentifyRequest* req = new SASL::IdentifyRequest(this->owner, m.source, username, password); |