On 05/25/2011 11:07 AM, Sumit Bose wrote:
Hi,
Kaushik found a code path where we didn't sanitize the user name. To
reproduce it try to authentication as an LDAP user with a user name like
'user\01'. It is important to have '\0' followed by other characters in
the name.
The attached patch should fix the issue. The related trac ticket is
#639.
bye,
Sumit
Ack