Null terminate user string even if no user authentication.

Tom


git-svn-id: http://svn.cactuscode.org/arrangements/CactusConnect/HTTPD/trunk@48 1faa4e14-9dd3-4be0-9f0e-ffe519881164

1 files changed, 6 insertions, 0 deletions

diff --git a/src/Authorisation.c b/src/Authorisation.c
index 92a6a27..a6ca2e1 100644
--- a/src/Authorisation.c
+++ b/src/Authorisation.c
@@ -180,6 +180,12 @@ int HTTP_AuthenticateBasic(httpRequest *request,
 
   authorised = 0;
 
+  /* Null terminate the user string */ 
+  if(user && length > 0)
+  {
+    *user = 0;
+  }
+
   /* Ok, there's an authentication string here. */
   if(value)
   {