diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/mongo/db/auth/user_management_commands_parser.cpp | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/mongo/db/auth/user_management_commands_parser.cpp b/src/mongo/db/auth/user_management_commands_parser.cpp index fe5136f8f07..3ac8b13352e 100644 --- a/src/mongo/db/auth/user_management_commands_parser.cpp +++ b/src/mongo/db/auth/user_management_commands_parser.cpp @@ -232,6 +232,9 @@ Status parseCreateOrUpdateUserCommands(const BSONObj& cmdObj, if (!status.isOK()) { return status; } + if (userName.find('\0') != std::string::npos) { + return Status(ErrorCodes::BadValue, "Username cannot contain NULL characters"); + } parsedArgs->userName = UserName(userName, dbname); |