From 2eef3061ce8e3222da7864bfe4fd2bf767b5e5f1 Mon Sep 17 00:00:00 2001
From: Devaev Maxim <mdevaev@gmail.com>
Date: Fri, 15 May 2020 17:30:14 +0300
Subject: improved security checks

---
 kvmd/apps/vnc/vncauth.py | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'kvmd/apps/vnc/vncauth.py')

diff --git a/kvmd/apps/vnc/vncauth.py b/kvmd/apps/vnc/vncauth.py
index 2a66ee1d..b27d74d5 100644
--- a/kvmd/apps/vnc/vncauth.py
+++ b/kvmd/apps/vnc/vncauth.py
@@ -81,6 +81,8 @@ class VncAuthManager:
 
             (kvmd_user, kvmd_passwd) = kvmd_userpass.split(":")
             kvmd_user = kvmd_user.strip()
+            if len(kvmd_user) == 0:
+                raise VncAuthError(f"Empty KVMD user (right part) at line #{number}")
 
             if vnc_passwd in credentials:
                 raise VncAuthError(f"Found duplicating VNC password (left part) at line #{number}")
-- 
cgit v1.2.3