dovecot-2.2: auth: Avoid a crash by not trying to save empty del...

[dovecot at dovecot.org]

details:   http://hg.dovecot.org/dovecot-2.2/rev/308af6582495
changeset: 19338:308af6582495
user:      Timo Sirainen <tss at iki.fi>
date:      Thu Oct 29 14:09:52 2015 +0200
description:
auth: Avoid a crash by not trying to save empty delayed credentials.

diffstat:

 src/auth/auth-request.c |  2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diffs (12 lines):

diff -r 8f198b569b01 -r 308af6582495 src/auth/auth-request.c
--- a/src/auth/auth-request.c	Thu Oct 29 12:55:20 2015 +0200
+++ b/src/auth/auth-request.c	Thu Oct 29 14:09:52 2015 +0200
@@ -810,7 +810,7 @@
 	if (!auth_request_handle_passdb_callback(&result, request)) {
 		/* try next passdb */
 		if (request->skip_password_check &&
-		    request->delayed_credentials == NULL) {
+		    request->delayed_credentials == NULL && size > 0) {
 			/* passdb continue* rule after a successful lookup.
 			   remember these credentials and use them later on. */
 			unsigned char *dup;