]> git.ipfire.org Git - thirdparty/openvpn.git/commitdiff
Remove comparing username to NULL in tls_lock_username
authorArne Schwabe <arne@rfc2549.org>
Tue, 21 Jan 2025 16:12:47 +0000 (17:12 +0100)
committerGert Doering <gert@greenie.muc.de>
Mon, 27 Jan 2025 11:35:40 +0000 (12:35 +0100)
tls_lock_username is only called in a single place and that place
calls this is function with up->username, which is always defined.

Change-Id: Ib8adf7b31cae02e2de3d45da23b76a2d79f13e20
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Message-Id: <20250121161247.37883-1-frank@lichtenheld.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg30520.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_verify.c

index 4c4b58d64592eb22676b0ae3dd0a86520283c73e..e7d7ed6f513958f726334b2899d3350792f7022d 100644 (file)
@@ -153,11 +153,11 @@ tls_lock_username(struct tls_multi *multi, const char *username)
 {
     if (multi->locked_username)
     {
-        if (!username || strcmp(username, multi->locked_username))
+        if (strcmp(username, multi->locked_username) != 0)
         {
             msg(D_TLS_ERRORS, "TLS Auth Error: username attempted to change from '%s' to '%s' -- tunnel disabled",
                 multi->locked_username,
-                np(username));
+                username);
 
             /* disable the tunnel */
             tls_deauthenticate(multi);
@@ -166,10 +166,7 @@ tls_lock_username(struct tls_multi *multi, const char *username)
     }
     else
     {
-        if (username)
-        {
-            multi->locked_username = string_alloc(username, NULL);
-        }
+        multi->locked_username = string_alloc(username, NULL);
     }
     return true;
 }