From: Timo Sirainen <timo.sirainen@open-xchange.com>
Date: Thu, 11 Sep 2025 12:21:55 +0000 (+0300)
Subject: auth: auth_request_import() - Avoid crash with "passdb_" or "userdb_" field
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=68066324e6f0156cbfe3324fb468db69df32820f;p=thirdparty%2Fdovecot%2Fcore.git

auth: auth_request_import() - Avoid crash with "passdb_" or "userdb_" field
---

diff --git a/src/auth/auth-request-fields.c b/src/auth/auth-request-fields.c
index 8a5fe8a1a6..94eceda763 100644
--- a/src/auth/auth-request-fields.c
+++ b/src/auth/auth-request-fields.c
@@ -321,9 +321,9 @@ bool auth_request_import(struct auth_request *request,
 	} else if (strcmp(key, "mech") == 0) {
 		fields->mech_name = p_strdup(request->pool, value);
 		event_add_str(request->event, "mechanism", value);
-	} else if (str_begins(key, "passdb_", &key))
+	} else if (str_begins(key, "passdb_", &key) && key[0] != '\0')
 		auth_fields_add(fields->extra_fields, key, value, 0);
-	else if (str_begins(key, "userdb_", &key)) {
+	else if (str_begins(key, "userdb_", &key) && key[0] != '\0') {
 		if (fields->userdb_reply == NULL)
 			auth_request_init_userdb_reply(request);
 		auth_fields_add(fields->userdb_reply, key, value, 0);