diff options
| author | rahuldhodapkar <rahul.m.dhodapkar@gmail.com> | 2016-01-06 13:34:23 +0100 |
|---|---|---|
| committer | rahuldhodapkar <rahul.m.dhodapkar@gmail.com> | 2016-01-13 10:43:12 -0500 |
| commit | f8f5dab11c2ed931add8d34e5e5dcc666e1ed5c8 (patch) | |
| tree | d366296cd01b0aecef590c2d4f94e031425f8883 /src | |
| parent | 1d26b77d115eb39f03dffbdbaccf10e696cd4fe3 (diff) | |
| download | mongo-f8f5dab11c2ed931add8d34e5e5dcc666e1ed5c8.tar.gz | |
SERVER-20358 prevent creation of users containing NULL characters
(cherry picked from commit 6a46a7c34222329972b6c6b0fae70bc6cd72c2fa)
Diffstat (limited to 'src')
| -rw-r--r-- | src/mongo/db/auth/user_management_commands_parser.cpp | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/mongo/db/auth/user_management_commands_parser.cpp b/src/mongo/db/auth/user_management_commands_parser.cpp index fe5136f8f07..3ac8b13352e 100644 --- a/src/mongo/db/auth/user_management_commands_parser.cpp +++ b/src/mongo/db/auth/user_management_commands_parser.cpp @@ -232,6 +232,9 @@ Status parseCreateOrUpdateUserCommands(const BSONObj& cmdObj, if (!status.isOK()) { return status; } + if (userName.find('\0') != std::string::npos) { + return Status(ErrorCodes::BadValue, "Username cannot contain NULL characters"); + } parsedArgs->userName = UserName(userName, dbname); |