auth: Escape exported session ID string in protocol replies

Session ID is normally coming only from trusted sources, so the lack of
escaping shouldn't have mattered too much.

diff --git a/src/auth/auth-request-fields.c b/src/auth/auth-request-fields.c
index a35347b10ebf1acfc6faaf4cf4e666cb8c4b2c8c..182a40ce743b2696faa496b55a8212dc95077f25 100644 (file)
--- a/src/auth/auth-request-fields.c
+++ b/src/auth/auth-request-fields.c
@@ -94,8 +94,10 @@ void auth_request_export(struct auth_request *request, string_t *dest)
                str_append(dest, "\tlocal_name=");
                str_append_tabescaped(dest, fields->local_name);
        }
-       if (fields->session_id != NULL)
-               str_printfa(dest, "\tsession=%s", fields->session_id);
+       if (fields->session_id != NULL) {
+               str_append(dest, "\tsession=");
+               str_append_tabescaped(dest, fields->session_id);
+       }
        if (event_want_debug(request->event))
                str_append(dest, "\tdebug");
        switch (fields->secured) {