Mercurial > dovecot > core-2.2
changeset 20927:12bc0868ef0e
auth: Fixed assert-crash on invalid auth-client input
For example if client sends invalid input like:
auth: Error: BUG: Authentication client sent unknown command: XYZ
Fixes crash:
auth: Panic: key not found from hash
| author | Timo Sirainen <timo.sirainen@dovecot.fi> |
|---|---|
| date | Thu, 20 Oct 2016 16:30:58 +0300 |
| parents | 6c00a8320574 |
| children | c8f313b25bdd |
| files | src/auth/auth-request-handler.c |
| diffstat | 1 files changed, 1 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/src/auth/auth-request-handler.c Thu Oct 20 13:30:36 2016 +0300 +++ b/src/auth/auth-request-handler.c Thu Oct 20 16:30:58 2016 +0300 @@ -81,6 +81,7 @@ case AUTH_REQUEST_STATE_NEW: case AUTH_REQUEST_STATE_MECH_CONTINUE: case AUTH_REQUEST_STATE_FINISHED: + auth_request->removed_from_handler = TRUE; auth_request_unref(&auth_request); hash_table_remove(handler->requests, key); break;