> Hi > On 12/22/2017 12:07 PM, Frediano Ziglio wrote: > > Signed-off-by: Frediano Ziglio <fziglio@xxxxxxxxxx> --- > > > server/red-stream.c | 2 +- > > > 1 file changed, 1 insertion(+), 1 deletion(-) > > > diff --git a/server/red-stream.c b/server/red-stream.c > > > index 3dbdfca82..fccad8b27 100644 > > > --- a/server/red-stream.c > > > +++ b/server/red-stream.c > > > @@ -987,7 +987,7 @@ bool red_sasl_handle_auth_mechname(RedStream *stream, > > AsyncReadDone read_cb, voi > > > char quoted_mechname[SASL_MAX_MECHNAME_LEN + 4]; > > > sprintf(quoted_mechname, ",%s,", sasl->mechname); > > > > > > - if (strstr(sasl->mechlist, quoted_mechname) == NULL) { > > > + if (strchr(sasl->mechname, ',') || strstr(sasl->mechlist, > > quoted_mechname) == NULL) { > > > return false; > > > } > > Acked-by: Snir Sheriber <ssheribe@xxxxxxxxxx> > ( Maybe can be merged with the first patch? ) It touches the same lines but it a completely different issue and rationale. > Snir. Frediano _______________________________________________ Spice-devel mailing list Spice-devel@xxxxxxxxxxxxxxxxxxxxx https://lists.freedesktop.org/mailman/listinfo/spice-devel