[SCM] GNU gsasl branch, master, updated. gsasl-1-2-85-gfa993f5

[Simon Josefsson]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gsasl".

http://git.savannah.gnu.org/cgit/gsasl.git/commit/?id=fa993f5ed3b412b98e165dfeea4e50c13f13c6cc

The branch, master has been updated
       via  fa993f5ed3b412b98e165dfeea4e50c13f13c6cc (commit)
      from  e4fddf0a8cbd737bd66f396d7b9b8c407d497bc8 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit fa993f5ed3b412b98e165dfeea4e50c13f13c6cc
Author: Simon Josefsson <address@hidden>
Date:   Fri Sep 11 15:07:09 2009 +0200

    SCRAM: Check that username doesn't fail SASLprep (as required).

-----------------------------------------------------------------------

Summary of changes:
 lib/scram/server.c |   10 ++++++++++
 1 files changed, 10 insertions(+), 0 deletions(-)

diff --git a/lib/scram/server.c b/lib/scram/server.c
index e484df7..251ce04 100644
--- a/lib/scram/server.c
+++ b/lib/scram/server.c
@@ -129,6 +129,16 @@ _gsasl_scram_sha1_server_step (Gsasl_session * sctx,
        if (state->cf.cbflag != 'n')
          return GSASL_AUTHENTICATION_ERROR;
 
+       /* Check that username doesn't fail SASLprep. */
+       {
+         char *tmp;
+         rc = gsasl_saslprep (state->cf.username, GSASL_ALLOW_UNASSIGNED,
+                              &tmp, NULL);
+         if (rc != GSASL_OK || *tmp == '\0')
+           return GSASL_AUTHENTICATION_ERROR;
+         gsasl_free (tmp);
+       }
+
        {
          const char *p;
 


hooks/post-receive
-- 
GNU gsasl