On Wed, 2011-05-25 at 12:49 +0200, Jakub Hrozek wrote:
On 05/25/2011 11:07 AM, Sumit Bose wrote:
> Hi,
>
> Kaushik found a code path where we didn't sanitize the user name. To
> reproduce it try to authentication as an LDAP user with a user name like
> 'user\01'. It is important to have '\0' followed by other characters
in
> the name.
>
> The attached patch should fix the issue. The related trac ticket is
> #639.
>
> bye,
> Sumit
>
>
Ack
Pushed to master.