From b940077553a538a14519bd11207c96bfd7b5ae4e Mon Sep 17 00:00:00 2001 From: Adam Date: Thu, 16 Oct 2014 21:38:46 -0400 Subject: Validate credentials sent via sasl more --- modules/extra/m_sasl_dh-aes.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'modules/extra/m_sasl_dh-aes.cpp') diff --git a/modules/extra/m_sasl_dh-aes.cpp b/modules/extra/m_sasl_dh-aes.cpp index d556e8502..f398dd45d 100644 --- a/modules/extra/m_sasl_dh-aes.cpp +++ b/modules/extra/m_sasl_dh-aes.cpp @@ -157,7 +157,7 @@ class DHAES : public Mechanism std::string username = &decrypted[0]; std::string password = &decrypted[username.length() + 1]; - if (username.empty() || password.empty()) + if (username.empty() || password.empty() || !IRCD->IsNickValid(username) || password.find_first_of("\r\n") != Anope::string::npos) return Err(sess, pubkey); SASL::IdentifyRequest* req = new SASL::IdentifyRequest(this->owner, m.source, username, password); -- cgit