From a84010cd642d2728f8e9097a6f4eb0e8bfad1451 Mon Sep 17 00:00:00 2001 From: Sadie Powell Date: Tue, 27 Aug 2024 18:28:57 +0100 Subject: Ensure the AUTHENTICATE command always returns a response. --- src/modules/m_sasl.cpp | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'src/modules/m_sasl.cpp') diff --git a/src/modules/m_sasl.cpp b/src/modules/m_sasl.cpp index 6050ebf90..852512020 100644 --- a/src/modules/m_sasl.cpp +++ b/src/modules/m_sasl.cpp @@ -335,10 +335,16 @@ public: { { if (!cap.IsEnabled(user)) + { + user->WriteNumeric(ERR_UNKNOWNCOMMAND, name, "You must request the sasl capability to use this command"); return CmdResult::FAILURE; + } if (parameters[0].find(' ') != std::string::npos || parameters[0][0] == ':') + { + user->WriteNumeric(ERR_SASLABORTED, "SASL authentication aborted"); return CmdResult::FAILURE; + } if (parameters[0].length() > MAX_AUTHENTICATE_SIZE) { -- cgit v1.3.1-10-gc9f91