1 |
diff -Nur qpsmtpd-0.84_bz9167/plugins/auth/auth_cvm_unix_local qpsmtpd-0.84/plugins/auth/auth_cvm_unix_local |
2 |
--- qpsmtpd-0.84_bz9167/plugins/auth/auth_cvm_unix_local 2009-04-03 07:48:33.000000000 +0200 |
3 |
+++ qpsmtpd-0.84/plugins/auth/auth_cvm_unix_local 2016-01-06 17:06:18.782453739 +0100 |
4 |
@@ -85,6 +85,11 @@ |
5 |
|
6 |
$self->log(LOGINFO, "authcvm/$method authentication attempt for: $user"); |
7 |
|
8 |
+ if ($user =~ /\x00/) { |
9 |
+ $self->log(LOGERROR, "deny: invalid username"); |
10 |
+ return (DENY, "authcvm, invalid username"); |
11 |
+ }; |
12 |
+ |
13 |
socket(SOCK, PF_UNIX, SOCK_STREAM, 0) |
14 |
or return (DENY, "authcvm/$method"); |
15 |
|