From: Aki Tuomi <aki.tuomi@dovecot.fi>
Date: Fri, 17 Feb 2017 13:44:17 +0000 (+0200)
Subject: mech-oauth2: Fix gs2-header parsing
X-Git-Tag: 2.3.0.rc1~2078
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8054b019bdca47df5676e40e19cbde7e68827640;p=thirdparty%2Fdovecot%2Fcore.git

mech-oauth2: Fix gs2-header parsing
---

diff --git a/src/auth/mech-oauth2.c b/src/auth/mech-oauth2.c
index 03477d9d9b..65a4c8629d 100644
--- a/src/auth/mech-oauth2.c
+++ b/src/auth/mech-oauth2.c
@@ -178,7 +178,7 @@ mech_oauthbearer_auth_continue(struct auth_request *request,
 	}
 
 	/* the first field is specified by RFC5801 as gs2-header */
-	for(ptr = t_strsplit(fields[0], ","); *ptr != NULL; ptr++) {
+	for(ptr = t_strsplit_spaces(fields[0], ","); *ptr != NULL; ptr++) {
 		switch(*ptr[0]) {
 		case 'f':
 			auth_request_log_info(request, AUTH_SUBSYS_MECH,
@@ -207,6 +207,7 @@ mech_oauthbearer_auth_continue(struct auth_request *request,
 						      "%s", error);
 				
 			}
+			break;
 		default:
 			auth_request_log_info(request, AUTH_SUBSYS_MECH,
 					      "Invalid gs2-header in request");