Check if auth_user is set.

Fixes a crash if password packet appears before startup packet (#42).
pgbouncer · Apr 8, 2015 · 74d6e5f · 74d6e5f
1 parent 82c7b4d
commit 74d6e5f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/client.c b/src/client.c
@@ -262,6 +262,12 @@ static bool handle_client_startup(PgSocket *client, PktHdr *pkt)
 		}
 		break;
 	case 'p':		/* PasswordMessage */
+		/* too early */
+		if (!client->auth_user) {
+			disconnect_client(client, true, "client password pkt before startup packet");
+			return false;
+		}
+
 		/* haven't requested it */
 		if (cf_auth_type <= AUTH_TRUST) {
 			disconnect_client(client, true, "unrequested passwd pkt");