summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAttila Molnar <attilamolnar@hush.com>2015-04-16 21:13:07 +0200
committerAttila Molnar <attilamolnar@hush.com>2015-04-16 21:13:07 +0200
commita0c331eff30434dc648638990f16f546c9467c37 (patch)
tree2e3b72c48fc78b246a8a1b36fc2cfc4703c5399c
parent6058483d9fbc1b904d5ae7cfea47bfcde5c5b559 (diff)
m_sasl Add missing validation for server-to-server SASL message
-rw-r--r--src/modules/m_sasl.cpp3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/modules/m_sasl.cpp b/src/modules/m_sasl.cpp
index 66efcfe4e..b59fd3835 100644
--- a/src/modules/m_sasl.cpp
+++ b/src/modules/m_sasl.cpp
@@ -99,6 +99,9 @@ class SaslAuthenticator
if (msg[0] != this->agent)
return this->state;
+ if (msg.size() < 4)
+ return this->state;
+
if (msg[2] == "C")
this->user->Write("AUTHENTICATE %s", msg[3].c_str());
else if (msg[2] == "D")