From 574f916912ca9e4ba9c7e68ed935477b8f507540 Mon Sep 17 00:00:00 2001 From: Lauri Kasanen Date: Fri, 8 Oct 2021 13:21:38 +0300 Subject: [PATCH] Fix a nonexistent username + empty password passing through --- common/network/websocket.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/common/network/websocket.c b/common/network/websocket.c index 47ac11d..e9ad04a 100644 --- a/common/network/websocket.c +++ b/common/network/websocket.c @@ -1320,6 +1320,8 @@ ws_ctx_t *do_handshake(int sock) { } else { // Client tried an empty password, just fail them response[0] = '\0'; + authbuf[0] = 'a'; + authbuf[1] = '\0'; } }