X-Git-Url: https://git.tokkee.org/?p=sysdb.git;a=blobdiff_plain;f=src%2Ffrontend%2Fsession.c;h=a64931eeca6f795075b09322cea6ac4c8b5bd1ff;hp=6403469a1e2d15020a939f130a54ed20c8711704;hb=be7975aabb4cba23235e460beba549e190175d92;hpb=f36bfd9a062f28166879a2bb847e0072158c1170

diff --git a/src/frontend/session.c b/src/frontend/session.c
index 6403469..a64931e 100644
--- a/src/frontend/session.c
+++ b/src/frontend/session.c
@@ -29,6 +29,8 @@
 
 #include "frontend/connection-private.h"
 
+#include <string.h>
+
 /*
  * public API
  */
@@ -36,13 +38,26 @@
 int
 sdb_fe_session_start(sdb_conn_t *conn)
 {
+	const char *username;
+
 	if ((! conn) || (conn->username))
 		return -1;
 
 	if (conn->cmd != CONNECTION_STARTUP)
 		return -1;
 
+	username = sdb_strbuf_string(conn->buf);
+	if ((! username) || (! conn->cmd_len) || (! *username)) {
+		sdb_strbuf_sprintf(conn->errbuf, "Invalid empty username");
+		return -1;
+	}
+
 	/* XXX: for now, simply accept all connections */
+	conn->username = strndup(username, conn->cmd_len);
+	if (! conn->username) {
+		sdb_strbuf_sprintf(conn->errbuf, "Authentication failed");
+		return -1;
+	}
 	sdb_connection_send(conn, CONNECTION_OK, 0, NULL);
 	return 0;
 } /* sdb_fe_session_start */