diff --git a/lib/fko_user.c b/lib/fko_user.c index f24cf3ab..99b8086d 100644 --- a/lib/fko_user.c +++ b/lib/fko_user.c @@ -144,15 +144,42 @@ validate_username(const char *username) if(username == NULL || strnlen(username, MAX_SPA_USERNAME_SIZE) == 0) return(FKO_ERROR_INVALID_DATA_USER_MISSING); - /* Make sure it is just alpha-numeric chars, dashes, dots, and underscores + /* Exclude a few chars - this list is consistent with MS guidance since + * libfko runs on Windows: + * http://technet.microsoft.com/en-us/library/bb726984.aspx */ - if(isalnum(username[0]) == 0) - return(FKO_ERROR_INVALID_DATA_USER_FIRSTCHAR_VALIDFAIL); - - for (i=1; i < (int)strnlen(username, MAX_SPA_USERNAME_SIZE); i++) + for (i=0; i < (int)strnlen(username, MAX_SPA_USERNAME_SIZE); i++) + { if((isalnum(username[i]) == 0) - && username[i] != '-' && username[i] != '_' && username[i] != '.') - return(FKO_ERROR_INVALID_DATA_USER_REMCHAR_VALIDFAIL); + && ((username[i] < 0x20 || username[i] > 0x7e) + /* Not allowed chars: " / \ [ ] : ; | = , + * ? < > + */ + || (username[i] == 0x22 + || username[i] == 0x2f + || username[i] == 0x5c + || username[i] == 0x5b + || username[i] == 0x5d + || username[i] == 0x3a + || username[i] == 0x3b + || username[i] == 0x7c + || username[i] == 0x3d + || username[i] == 0x2c + || username[i] == 0x2b + || username[i] == 0x2a + || username[i] == 0x3f + || username[i] == 0x3c + || username[i] == 0x3e))) + { + if(i == 0) + { + return(FKO_ERROR_INVALID_DATA_USER_FIRSTCHAR_VALIDFAIL); + } + else + { + return(FKO_ERROR_INVALID_DATA_USER_REMCHAR_VALIDFAIL); + } + } + } return FKO_SUCCESS; } diff --git a/perl/FKO/t/04_fuzzing.t b/perl/FKO/t/04_fuzzing.t index 48da09a4..5f2d231c 100644 --- a/perl/FKO/t/04_fuzzing.t +++ b/perl/FKO/t/04_fuzzing.t @@ -13,7 +13,7 @@ # use FKO; -use Test::More tests => 9693; +use Test::More tests => 9581; my $err; @@ -40,16 +40,16 @@ my @fuzzing_client_timeouts = ( my @fuzzing_usernames = ( 'A'x1000, - "-1", - -1, - '123%123', - '123$123', - '-user', - '_user', - '-User', - ',User', - 'part1 part2', - 'a:b', + ",1", + '123>123', + '123<123', + '123' . pack('a', "\x10"), + '*-user', + '?user', + 'User+', + 'U+er', + 'part1|part2', + 'a:b' ); my @fuzzing_nat_access_msgs = ( @@ -359,6 +359,7 @@ my %fuzzing_spa_packets = (); my $fuzzing_key = 'testtest'; open F, "< $fuzzing_pkts_file" or die $!; while () { + next if /^#/; if (/(?:Bogus|Invalid_encoding)\s(\S+)\:\s+(.*)\,\sSPA\spacket\:\s(\S+)/) { push @{$fuzzing_spa_packets{$1}{$2}}, $3; } diff --git a/perl/FKO/t/fuzzing_spa_packets b/perl/FKO/t/fuzzing_spa_packets index b8b06dc0..df51e5de 100644 --- a/perl/FKO/t/fuzzing_spa_packets +++ b/perl/FKO/t/fuzzing_spa_packets @@ -1,12 +1,12 @@ [+] Bogus user: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA, SPA packet: /jVrw5swXAiwTCIQfm/DgmW4DzchNfMmkz9D9BhlOvtnkYlsxBypLsNggIhQnwMhISER4QcomfjD7MM9nhrAMicwLLxWXL1ArXqSTM/zZ/MzNH1v1Ryd5gbONmk9xMFRV6Ne59bkynUlQdKVoFOp6kjIH7UMCJMhakznBdYKM6mYxu2zd9FgO2FxsjEbslriaiwZ+ZTl893VQLDv2Lox9RYFuflgWQiwSsvFuAOuUIQ9Erm/O12MVaetCH6YHn/a+oomfl11LtkQ -[+] Bogus user: -1, SPA packet: /Z94ZfHSwY7u8ufEsED5sYe+e9l44ZOxWoLkm6e1/QPMWXj4QJfYA1wlOl385AxUwEnyuLuC38QHBDv5M1ZqBTyv3t/9UdqT5Bq2N6rxgXC6e4NzBrUoeeH7bkHscLpdB6gDVMn1cyjyrbZ/jED7NrE5aW5KOcZ/U -[+] Bogus user: -1, SPA packet: /S25N5Bu+ToHbapiZgVKsWxuk6LE0dc7tgemw7W47zLY0fFPFESXfSyCfh5vg6CYuYyfS8YTSfwPrNFzX5OwrtUaZYC4azyNYu3E4xcwMIc1RE9aIGHzNqfh67r6yZWbIPupRywQgm6GD7nHUKI2WvxErTcz6bpAA -[+] Bogus user: 123%123, SPA packet: +n5kjwTx5kl+2PyvzzpfwD6M4zniEmue51cHJWpA32s834S7tw42Lb1x0+S4n/HTDxZpMmblpggyLqmr/yI03KGiwOZ3LaDxcTJhMHesS/z3qLMotAeqtriK8i8yhGviLhX+QbWaq2lS0Y2DoxwvvIybx0dn9yywI -[+] Bogus user: 123$123, SPA packet: 89rJDUt4QkBwukV5Rxb9r795kYgUXvkrbATOiuWmxrScpCncoSXNUQPb1s4QJYStqAuWnVyHeJS/e6QPAarvugb+VgjkqoOQV/12G7sakLRH6NTfllfbjxjjKJLeYUSF67b0RbrHTfPpK9whrhzLVvh1vMz+xc3Ic -[+] Bogus user: -user, SPA packet: /mBtL5vIuZP6Lk0LSAdjsdBBQKjlI8xcIzdYQeQ0i5Rmee+o2xU/sSrxt3F1lel8qgSdXxRM3wNNBs5LXvY5YKDHH+qRF01nyl0ZxN2djDHay0bR1ySwaU0971OdfUZh+mCeTSa5hLNjORh71Q0TK+38EBFKmVaX4 -[+] Bogus user: -User, SPA packet: /pBXG3nk5g8WvOtVemNGuixBiVIokXdytLMerk85hWlmUPwIXJWllP2VJYGgU0luOwvsl9erg/VvFtq+w5dWGdfLCXoBfqJtuTIUBgCB/EZmSmCnzshKgLkdgOXqBj9upNMuVtWr/CkSjoqC/JYuUsnjovK6cYuhY +#[+] Bogus user: -1, SPA packet: /Z94ZfHSwY7u8ufEsED5sYe+e9l44ZOxWoLkm6e1/QPMWXj4QJfYA1wlOl385AxUwEnyuLuC38QHBDv5M1ZqBTyv3t/9UdqT5Bq2N6rxgXC6e4NzBrUoeeH7bkHscLpdB6gDVMn1cyjyrbZ/jED7NrE5aW5KOcZ/U +#[+] Bogus user: -1, SPA packet: /S25N5Bu+ToHbapiZgVKsWxuk6LE0dc7tgemw7W47zLY0fFPFESXfSyCfh5vg6CYuYyfS8YTSfwPrNFzX5OwrtUaZYC4azyNYu3E4xcwMIc1RE9aIGHzNqfh67r6yZWbIPupRywQgm6GD7nHUKI2WvxErTcz6bpAA +#[+] Bogus user: 123%123, SPA packet: +n5kjwTx5kl+2PyvzzpfwD6M4zniEmue51cHJWpA32s834S7tw42Lb1x0+S4n/HTDxZpMmblpggyLqmr/yI03KGiwOZ3LaDxcTJhMHesS/z3qLMotAeqtriK8i8yhGviLhX+QbWaq2lS0Y2DoxwvvIybx0dn9yywI +#[+] Bogus user: 123$123, SPA packet: 89rJDUt4QkBwukV5Rxb9r795kYgUXvkrbATOiuWmxrScpCncoSXNUQPb1s4QJYStqAuWnVyHeJS/e6QPAarvugb+VgjkqoOQV/12G7sakLRH6NTfllfbjxjjKJLeYUSF67b0RbrHTfPpK9whrhzLVvh1vMz+xc3Ic +#[+] Bogus user: -user, SPA packet: /mBtL5vIuZP6Lk0LSAdjsdBBQKjlI8xcIzdYQeQ0i5Rmee+o2xU/sSrxt3F1lel8qgSdXxRM3wNNBs5LXvY5YKDHH+qRF01nyl0ZxN2djDHay0bR1ySwaU0971OdfUZh+mCeTSa5hLNjORh71Q0TK+38EBFKmVaX4 +#[+] Bogus user: -User, SPA packet: /pBXG3nk5g8WvOtVemNGuixBiVIokXdytLMerk85hWlmUPwIXJWllP2VJYGgU0luOwvsl9erg/VvFtq+w5dWGdfLCXoBfqJtuTIUBgCB/EZmSmCnzshKgLkdgOXqBj9upNMuVtWr/CkSjoqC/JYuUsnjovK6cYuhY [+] Bogus user: ,User, SPA packet: +NttFWo9xtUi43BkpKgWTv6VFzvLg7h56Ao0jzqV83gjBQufzurBy3QL3FUoFRFVm6XtIZb+iyCe6S37oyrmDRfBd53hjW9tVTcHFNbjSbwVazx/8CY4opa0c7taDukm+ZeSrxGrEgaQ2xBOgAzWcaMjl5msB4vfY -[+] Bogus user: part1 part2, SPA packet: 8aSOVXaOVpgSCSgBi6wKmcxekN5GWqe7LYcMMhQ7CqPHbR0tqHm+lDQNXs+g/oEByE7mKHgT7MItJXj+mR+mEkLDPW1V1aKcmOd9MW5AUgwcC+FzQW237N4cV6bUh5BQXw0UI/b1GxGgZYLdZYyzloIqBix0wW/TcYGemXytKFvHWg62BZtx1a +#[+] Bogus user: part1 part2, SPA packet: 8aSOVXaOVpgSCSgBi6wKmcxekN5GWqe7LYcMMhQ7CqPHbR0tqHm+lDQNXs+g/oEByE7mKHgT7MItJXj+mR+mEkLDPW1V1aKcmOd9MW5AUgwcC+FzQW237N4cV6bUh5BQXw0UI/b1GxGgZYLdZYyzloIqBix0wW/TcYGemXytKFvHWg62BZtx1a [+] Bogus user: a:b, SPA packet: 9dKARqlqkkNfi9TGyjhF9A9A7v9Q3+uqFJoP4ruuo0d4RNg4ByUf19Gx+PxkxJ57SJW+zAuaPq9SACL+J2qy28AsyyywzgIiDh3qRWW5pTe1VV2TlYM3ZTl1mjW/VvI0NAKA4c6H+q65rQ92lEhSemQeltknSo924 [+] Bogus access_msg: 1.2.3.4, SPA packet: +Y/knltunDHbR3eEjBa3CBKiegkcovOH4hinLk/6dbxkJMwHAd5zm+t56MhXSaV1sOFii5pWUihqOKGEEjj//LyALKuMYaCrvL6xXBN6XxaGRLOR8O3OQv2X+ZxP4f9RcMOA8H/NN6G/aChqM2S5TuZTQYSKmo3Y4 [+] Bogus access_msg: 1.2.3.4., SPA packet: 9YbtUGgch2eewXkuq12z9X9UJoniJF7Iq8OBnqKY6avd0vcv3UfpgP0isH71V5POS1+5qBlAjjVTu6oIAAt1D2vFVALt52+VmPUrreFmyWdFXjLRWE8kb16feEI75zQepvq3fPG5vOatJnZJenZUyrhhkBG68gxec @@ -1012,14 +1012,14 @@ [+] Bogus msg_type: no_colon_5_-2, SPA packet: 9JbupmCYzDMuW9QzUwFffTQewWTAWjxWgaTUFzFS1wcPWTvFXoltWu525w4MDfCLKulkbg+ximqh5shtxZoeEYVcMRAfQpMhF8mkNBQ3AUk1VdbmDN13civ9loRSE7q+yIEDz9diRWlWSAjH/+r1CSIxTkihG83q8 [+] Bogus msg_type: no_colon_5_255, SPA packet: /lNJLy0ARHsgANkJ90VaQGsvamt9p2fA0QLOHks8Eukmi2F1XO8srrA5Eo8MdH+KhKVERDJt5Dj/Dx5gGbiuY8tNWKA8tv57InHCatNHctPYJ0QS1/07yRVVhS1GHd/Hc9WEBzIUJZwOLUb+2kd8C4LIoxlPpr+R4 [+] Bogus user: no_colon_6_AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA, SPA packet: 9JL3qqKPYtCkPw8JsC2mygGRmstOpocPdsj7jAaq4cBx5RE1ewgNMoLoZrd+SkU66I4N8JiMV7CTvNnPwI2+ZrN9mWhOY3VVd2y6gyUpd7Tcq970beQl/RSE4sb1+Wsum9afPHaLlA8HfpvZzM4UDOzQt5DFYhNvJbVtCy0BeUlueys9hu1C8X9Zw9gYuerJTDOTAt5FmcgpbKViSEruJiEDajRlMed1Uboinuh82Y2kiMrYgPUB1h4nbePDvU4emzfQ2N5mP/xw -[+] Bogus user: no_colon_6_-1, SPA packet: 95ojjMywG+mgRykG2Eqb/78V2MUGwq/8+Dia2s/st7rZdjxMWdOB9Fxyh4e7B2rYp7qtGiFnOovZLUp1/hAc65tjKpPeXoXQ+Jc4FAan+RfnPNsbpiUoQHW/hTNoIRQCfifhpS+nrg0/rAv9YL7/Xz9lonIRWCknc -[+] Bogus user: no_colon_6_-1, SPA packet: 8MdmzYIB/LYOFmvwwKRNyh8ApPHAdMLhP2yfxTa5CK30I85WJXmktQtp264CZAT6CqBEEsTOeZJGO/jEgouMAsRhCYrGRyh55DNipEGFCQVbuunHmukcS9Lx4HqZWY962YPy0NRQHzjmLbYZaakeZLzChHFVQetow -[+] Bogus user: no_colon_6_123%123, SPA packet: +QgkL5+d53iOA4+NlgS733e1gTnL4/wRTsO3MnaBA8yAlwCMPOpOHbWuIuvbStT3yewvL5/a04hRvkZlnw1UM83owGwNCklNPlhhKVrCtwTUucpT4bMhwYbDBVOcP292xyTxRnHmZpSKVvEkocVzvsRkF9K4txIbs -[+] Bogus user: no_colon_6_123$123, SPA packet: +KMdQ8y2hJ1ED0ft7tzgS8LLzxfKigEaGXJ7boA4K5efrSO37I7fXm7D8Y/5hLrG99Dlfjt8iE5dyAapPx3mFyE973YHu5S0cv7JbpqBcJuprSzOHat87Av5qeBG0RE0n13tw/IzHI5RgqeKYf9P8omiugGsRlbJ4 -[+] Bogus user: no_colon_6_-user, SPA packet: +3MdEluwm+5oI0DbAtdDl8V9H4RSbsUhx4UO3nA+fltjuDyjniBmQlJlbad+SAOxrcXiF8/g0XR2MCmcv7yT5S1/Nq7vV2StnJFcSBf3kcM3M4peqZp3sb1MlC0MBGuaX7BD2aOCIFFQZbuhnXISFhBcicP+cpRzY -[+] Bogus user: no_colon_6_-User, SPA packet: 8WnYEMIunt5Ca8R793Q+d50rO1I5WDMtVKrih1aVXwVzzG9xH6YXRCcpVKg6ZZV9H2c+vyiThFGvMipDGD6ZzWbxfg2hOiulQ+K3b4XAQM7vl8PTu/T7E5ep4psD0zQ9DfzHm3Ojv/ZRAxCzbJXc5A1eMdYcxo40c +#[+] Bogus user: no_colon_6_-1, SPA packet: 95ojjMywG+mgRykG2Eqb/78V2MUGwq/8+Dia2s/st7rZdjxMWdOB9Fxyh4e7B2rYp7qtGiFnOovZLUp1/hAc65tjKpPeXoXQ+Jc4FAan+RfnPNsbpiUoQHW/hTNoIRQCfifhpS+nrg0/rAv9YL7/Xz9lonIRWCknc +#[+] Bogus user: no_colon_6_-1, SPA packet: 8MdmzYIB/LYOFmvwwKRNyh8ApPHAdMLhP2yfxTa5CK30I85WJXmktQtp264CZAT6CqBEEsTOeZJGO/jEgouMAsRhCYrGRyh55DNipEGFCQVbuunHmukcS9Lx4HqZWY962YPy0NRQHzjmLbYZaakeZLzChHFVQetow +#[+] Bogus user: no_colon_6_123%123, SPA packet: +QgkL5+d53iOA4+NlgS733e1gTnL4/wRTsO3MnaBA8yAlwCMPOpOHbWuIuvbStT3yewvL5/a04hRvkZlnw1UM83owGwNCklNPlhhKVrCtwTUucpT4bMhwYbDBVOcP292xyTxRnHmZpSKVvEkocVzvsRkF9K4txIbs +#[+] Bogus user: no_colon_6_123$123, SPA packet: +KMdQ8y2hJ1ED0ft7tzgS8LLzxfKigEaGXJ7boA4K5efrSO37I7fXm7D8Y/5hLrG99Dlfjt8iE5dyAapPx3mFyE973YHu5S0cv7JbpqBcJuprSzOHat87Av5qeBG0RE0n13tw/IzHI5RgqeKYf9P8omiugGsRlbJ4 +#[+] Bogus user: no_colon_6_-user, SPA packet: +3MdEluwm+5oI0DbAtdDl8V9H4RSbsUhx4UO3nA+fltjuDyjniBmQlJlbad+SAOxrcXiF8/g0XR2MCmcv7yT5S1/Nq7vV2StnJFcSBf3kcM3M4peqZp3sb1MlC0MBGuaX7BD2aOCIFFQZbuhnXISFhBcicP+cpRzY +#[+] Bogus user: no_colon_6_-User, SPA packet: 8WnYEMIunt5Ca8R793Q+d50rO1I5WDMtVKrih1aVXwVzzG9xH6YXRCcpVKg6ZZV9H2c+vyiThFGvMipDGD6ZzWbxfg2hOiulQ+K3b4XAQM7vl8PTu/T7E5ep4psD0zQ9DfzHm3Ojv/ZRAxCzbJXc5A1eMdYcxo40c [+] Bogus user: no_colon_6_,User, SPA packet: /fqpKAdXqw6JwY3HavqNKvXbSIRTlNhDZJM66L2Gkdm4wt47TotdILYqC7qbtfTmoEHuY/BE6Y8XWQ7S66o0m8woq4mcfrk6rhUooI81ZPA8ZJRekwSh/lXEpSmS6Bdtb0lyj4OefLkFgLdX/zQr242SUoQDJ4GDI -[+] Bogus user: no_colon_6_part1 part2, SPA packet: +F4wpP+6jVR5aLmHhl7AI9l20yFl5GC8L0JNLWIc/v97oew8BvQDVAEHXui4AH4LJLdl003o/a3KgPWUbfTuOaR7YuKuVn1wQVfVRaEMAUhdrT5POvJHVrJqfipkq4WMzl8CWLPuLgjxUJC0myqeWL0GXAYcMMnto83whamaigx3Zl9QzhcS9L +#[+] Bogus user: no_colon_6_part1 part2, SPA packet: +F4wpP+6jVR5aLmHhl7AI9l20yFl5GC8L0JNLWIc/v97oew8BvQDVAEHXui4AH4LJLdl003o/a3KgPWUbfTuOaR7YuKuVn1wQVfVRaEMAUhdrT5POvJHVrJqfipkq4WMzl8CWLPuLgjxUJC0myqeWL0GXAYcMMnto83whamaigx3Zl9QzhcS9L [+] Bogus user: no_colon_6_a:b, SPA packet: +gnkegEd4mtVbV9yUIj6xII7dPjqAlnlw59fzUKVOqFPPiQ9U7bxVcu9sNhPqTTq1M3PZss+hkltoPi4HhMW/EtmM1JlI2U8xUc7Q0xYUKlTalp501S+tRAuZ7N8uk2wccRd1JLYnQpTI1fRQ8XZqgIAB0tonfe2A [+] Bogus access_msg: no_colon_6_1.2.3.4, SPA packet: 9m5NRTfezT+SFhjXPxikLePX2iuyaN8FHIfTPJSvJQ5qzx2FKTHP0PTfPdht3XfTSoybV+lgLQuqe4Zg0/3/csIu82/CMxcZJz8l2YTWb2FvfLBjJMUZh7etZgGxWO7+hk0vaTx8wjPZjoXRbP4OqbEjobD2/R1N8 [+] Bogus access_msg: no_colon_6_1.2.3.4., SPA packet: 9Eb0f3V2dhXJEJRjKQyqT/guqcrRXDfZg0evIbL9ku8hsFEQFidEJY6aMTeqdQVinm5I5aDd79tpPdCQhd1ynP2djuxDIIZ2I9o7Y5vmTVNMrzl3uqbyUqXVNBDR9s9YI5Cyjq0Npz3nn1/gOgwbI/Ei+K4hW4DFI @@ -1180,14 +1180,14 @@ [+] Bogus msg_type: no_colon_6_-2, SPA packet: +7Zn8gjNV4LkzDj1tO3/kTPYPzKu7VAWLfa2ohfLix5fcwpOuSR8sUgn7LmPTU4GAsI/E7Y4+BNax8zMQVB5tVY6a/R9NR0GltRir8pUPIqLGE/4Mfo6Z67mOJrhqwrfUgGORoRXBUQlC/lZstNi0GQPxbfBon3mk [+] Bogus msg_type: no_colon_6_255, SPA packet: /HPHxRT+IbJ2J7BbOioYV0VRmXNpsyliu5hvgCXrYT2LU89VXeHrKNsSy7UpxgtngG6c0VDnZ+veWErD/TupZ6LXPJFq055uBwWr7W1eQh4Z1Qf7Cu+dlpsEg0cwQoOy577NgLcDuMd1jB8h6somlGqrrRQrbyfEc [+] Bogus user: no_colon_7_AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA, SPA packet: 9zuXplhtpxEGFWKLrZTq0bTUGQ1+XzwxQKSHN0YU3mNNr+rZVvWMdDym8Bow8rXbZEcvjicffAGb5Url5+4gWsgKrH+4VZKU02cjYiQW8xUewpV7IHG7L9Y7LmWSffu4Ch4j81Ysi67UjrNmGMY9X2Pn46g4TFGOtqBw1WhoBvuNPvCnED8AAVEpG3Rt71IdmrhIlxZRETzhytMJlX6OuATUFX7MT6/UKk+ja7p4Ud3hS1dskR4/BygYSWQ+1rPZPYoh+x6FUz3w -[+] Bogus user: no_colon_7_-1, SPA packet: +3XfCBjPSR5FSeMlFt976I/buOaQNrcJD3zo+l2sMHmoVY/02gZjVj3u0QKGjLiU71SsTDeXeOdC8PkbNKqA6hzFigJ7cunbe/7xWi9kemSi9Ud84cAIAbCCqhh+dUhNmFaLcvmjIXmDLMAExBZflCMAhJzHjb6IQ -[+] Bogus user: no_colon_7_-1, SPA packet: /WOUWzuLwoqr1xKRQmkcveyk+A85aoACFAu1wjfMNanoC9qskMJGaxTp3Zf10iDg4UEhPfwUq5XCfstZBocBZUZ8a9wCi35fnFslLLm+/hlxUnNkHN4xjv5CT3imIxIiSarKDelCUfYTALs/Rig8E9urGn+OMPAgU -[+] Bogus user: no_colon_7_123%123, SPA packet: /OZ91S/vNO2GYpIEfS0zJib1ccZ3tfxQ6dz38yZxrAN4tLruvTHC5ksx6GSUD31/pu5vdiT9pu+lP6HoghHZ+AtLiGr/UEHdwubRV11/H2RKq6Ev6JQs+4X2hv+x1VHKYdNCjZSmpaAElU3eBMgVLSrAsWSXy+S3Q -[+] Bogus user: no_colon_7_123$123, SPA packet: 8Jt+rUz3cCdHtyaOKLtVdx07apUzmT44odxf+Q1MKhLOGlwnpXWL6/ejMEZz5BKU2/ybDm0AifLoqRtBHUttIjVPyx4wWTjr/WK+3Zhl783a7hHTvcTlka//VynzN8/rBKUIA6dMETrlQO1TpuW41lPziuGwCjczI -[+] Bogus user: no_colon_7_-user, SPA packet: 9y43GvDRQ5+8//1Rh1aVIvN8r6BVcdF5FRf45E5IHeqQOZQqPcXjZMJcFNYG4OAizFt+f1rzk0Abat9tRbkjJCe/tvOybAm50Bx18IlN3gp0HsUzi5rdjqY/RBtaKMAbj5GapKeT7UrPFb19EjnAmmmLGW4sl+ED8 -[+] Bogus user: no_colon_7_-User, SPA packet: /bbUXJIn3CGVI7h0hliFSmlbT/flU25MKhd2RRjF/bHTChdVLt8Q1A/NceHVNCCOB+3hpsfU7kxmTF3+VweaE09s8bkcs5S4H/13ooETqLp6bdSDIWiKDAV84OzosJUnyyeNhEzadnJiH5Lj1kAKn+iOlxCRxHg40 +#[+] Bogus user: no_colon_7_-1, SPA packet: +3XfCBjPSR5FSeMlFt976I/buOaQNrcJD3zo+l2sMHmoVY/02gZjVj3u0QKGjLiU71SsTDeXeOdC8PkbNKqA6hzFigJ7cunbe/7xWi9kemSi9Ud84cAIAbCCqhh+dUhNmFaLcvmjIXmDLMAExBZflCMAhJzHjb6IQ +#[+] Bogus user: no_colon_7_-1, SPA packet: /WOUWzuLwoqr1xKRQmkcveyk+A85aoACFAu1wjfMNanoC9qskMJGaxTp3Zf10iDg4UEhPfwUq5XCfstZBocBZUZ8a9wCi35fnFslLLm+/hlxUnNkHN4xjv5CT3imIxIiSarKDelCUfYTALs/Rig8E9urGn+OMPAgU +#[+] Bogus user: no_colon_7_123%123, SPA packet: /OZ91S/vNO2GYpIEfS0zJib1ccZ3tfxQ6dz38yZxrAN4tLruvTHC5ksx6GSUD31/pu5vdiT9pu+lP6HoghHZ+AtLiGr/UEHdwubRV11/H2RKq6Ev6JQs+4X2hv+x1VHKYdNCjZSmpaAElU3eBMgVLSrAsWSXy+S3Q +#[+] Bogus user: no_colon_7_123$123, SPA packet: 8Jt+rUz3cCdHtyaOKLtVdx07apUzmT44odxf+Q1MKhLOGlwnpXWL6/ejMEZz5BKU2/ybDm0AifLoqRtBHUttIjVPyx4wWTjr/WK+3Zhl783a7hHTvcTlka//VynzN8/rBKUIA6dMETrlQO1TpuW41lPziuGwCjczI +#[+] Bogus user: no_colon_7_-user, SPA packet: 9y43GvDRQ5+8//1Rh1aVIvN8r6BVcdF5FRf45E5IHeqQOZQqPcXjZMJcFNYG4OAizFt+f1rzk0Abat9tRbkjJCe/tvOybAm50Bx18IlN3gp0HsUzi5rdjqY/RBtaKMAbj5GapKeT7UrPFb19EjnAmmmLGW4sl+ED8 +#[+] Bogus user: no_colon_7_-User, SPA packet: /bbUXJIn3CGVI7h0hliFSmlbT/flU25MKhd2RRjF/bHTChdVLt8Q1A/NceHVNCCOB+3hpsfU7kxmTF3+VweaE09s8bkcs5S4H/13ooETqLp6bdSDIWiKDAV84OzosJUnyyeNhEzadnJiH5Lj1kAKn+iOlxCRxHg40 [+] Bogus user: no_colon_7_,User, SPA packet: +ykM1nVIEv9pG2FkzNIYbrg9KsumJoeHpbA4BioaMizfjuaUD2jsolXnMLlXDt10TuQJzxWo4QbtXlbCrZPj27fTdctvqCm582tBwlAAju1LU5lNu9AspmTcFz6Zfe2edt0qT0d1C43RcSG32K4okroZfABFEFMGk -[+] Bogus user: no_colon_7_part1 part2, SPA packet: 8W/CMXEyAQQ/UL2BQQpE5/XPVght+FPZ4PeJmJsHJSaD+eBg2u3ZT9Mbvn29FXH3Mkvo8gdoULk/ub2hwAFydwSkvXhOSaa0isFxFaM3KpolYgAY3FpEkO9V+pwlFQa5HpcRc0Mck3Kv8WTjdv0TbMe4X1PovXCeEj8sv3G6LDOI8xOJHUSxWO +#[+] Bogus user: no_colon_7_part1 part2, SPA packet: 8W/CMXEyAQQ/UL2BQQpE5/XPVght+FPZ4PeJmJsHJSaD+eBg2u3ZT9Mbvn29FXH3Mkvo8gdoULk/ub2hwAFydwSkvXhOSaa0isFxFaM3KpolYgAY3FpEkO9V+pwlFQa5HpcRc0Mck3Kv8WTjdv0TbMe4X1PovXCeEj8sv3G6LDOI8xOJHUSxWO [+] Bogus user: no_colon_7_a:b, SPA packet: /yjPgsE0MPdQdwHPW/bvF9jLjGZ7xHJKg0uQEABMvFYNG0+6mj6XjSWDOxYN0QpPLRr6ezKRXUgO/B1hNxBiSAJNX+QbDbVlkTvEb79bx7DNLkbHX9vyU0ghrWcZEth9NTLkdgboMQ0kL3lqjnG8ICGKnJR7GLkt8 [+] Bogus access_msg: no_colon_7_1.2.3.4, SPA packet: /yIwplJKQextlbHR9yr7L3kfM1TalXZikqi/aWhEucmIILphAw8NrPy/vaGULa2j7POAXKEAOVKy3YlaXCw/MQdndP5sx20ksLHy5nXyibvb6mWjWI+NCROE3N/RX8P2IP7UOCrD9ArzYG+6lG40VvGF9bZgEXj98 [+] Bogus access_msg: no_colon_7_1.2.3.4., SPA packet: 9a7BWFGCoPTX1ZNXPLQ4cp6Amj+Bv1Xl/VjkHYMUggwLZ2tzL3L7ehvTJvwHhvjJX9BkCSdUVScKLEJoMSGLTOaoQP/Zwhd3DVSdLStR2py+P5Uv2z6f4x9JoD3e81N8BLlUDNjYTpXPfjQPzzCYXe+/1uXx3HpaA @@ -1517,14 +1517,14 @@ [+] Bogus msg_type: colon_1_to_a_-2, SPA packet: /YIJK5EAEkKV3QRFJA8pds05ui5ubzw2aI+fo/JEiEX5X93ECFFbjEDFjMl5FOkNQVbNl+DCn5Zgc+XABGJn2WuW8Qu1fczRrnPM0/1nysVzTgsq1pkP/gsfzaxp5SMTROwfZb5bSxbT9DPknYkLBZLAfDHY44M1o [+] Bogus msg_type: colon_1_to_a_255, SPA packet: 8xUCuHqcyhX3lZYZQBhNrIhFauE75pQa0gn6RamnqWIKpiaySAw5bsB8oxzxBozO3ue6mzIHpOt4ARCGo5/YijKMp431jdXbS+PB/wwjZP/YvgWeN9xlt1lIhw1jZ5TpfFelGx5M+GpcyjXyuaZPrHSOOrun3N/zY [+] Bogus user: extra_timestamp_digit_AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA, SPA packet: 94opCO/EP+F/z7yGkM8++qU7Zc6Cc1bh04r9oogov1fr+F+jF8c4mRspoa3o1Ou/haAnVv3jHtB2/WM0WjYF0PRUUWQs/DTS0oBR5w6opUOZhV0yLaLK6LrAPTf6JHzCF6TSCR/ATCDbhEJDeH0ITlsP7nyoXtxslTWvcdqTjnTG4gZhSe/MyB02En3M3nzSPTmrqVZOKsEOfT3n1qEQQLzOA2TG/2tliv8Y7ozo7veASl1cjTdB1GDnC/X0/pG0+amtE6vqZqVw -[+] Bogus user: extra_timestamp_digit_-1, SPA packet: 9avjKfoNgP2mpAtZijmWpNrpDCJvX574BJ4lzxgyvVOLcxMm6PmDwNhmD+BJtz9kf/nMfilPFaehCOmdbzOOhmzkGYIdpMyqmjcmheO3S0lxRxY3bQ+ITzkwJnT89T639oEcadjjbR9jTkB48W4aUTxu6FZwBsWCc -[+] Bogus user: extra_timestamp_digit_-1, SPA packet: 8EWbVXHsqjMrxoTQz1s52g0so7hdXObpM50Yygz6wwN5D8PuZ/PKo7nFhJnxylEmewuEyTB2XrMlU6WOBK9Wnbdqs5LRUDJXl5QaNFsXYBEVs/hmBkP6LWjpU6lLyujIsCELm3ACKS3mCyFy0VvvB+Q1O0wpxJV2M -[+] Bogus user: extra_timestamp_digit_123%123, SPA packet: +5rdTQ/0VQwd8x88JEPeyTJGVrIebNqyyNpH1B4+aN8CbmUUVgvTRI7ysIkRXOXyWL8nlJqR77rMiBKj36GFnm0vwf9TEws+OzKiI3T9vQLr84/5GBSHlsmcbuSOd6mPXkUI8ZqDZsNx7wKkO0zQJ2x7EfgG1nOwk -[+] Bogus user: extra_timestamp_digit_123$123, SPA packet: 9qqiMByuSi3cojJgs4pfJ4pbTRTmWVpSB6+E9/J9EZRt4414SVMmiDXhhEfRB69yCco3x+1qzbU62N36Emof8LXemI8qsNDpAV3PJP2BoSS3LAcganjf3Juz+4Zri4hqJ705YHu71TtX3PGZ5YvvHC2L4xlXA7nhc -[+] Bogus user: extra_timestamp_digit_-user, SPA packet: 9ZbMqZJn2wewaWX2XGCUPbdbaeHXAcKq4pUjMH2DNh2i5JFu1TDUT4sVkptW/8CfKZAyzL4G0zP4mjY1tx70ivau80qzsz+xpJug343wpUwS/9EHq6FYMsUjjQRUx6fvN7vSl+TJzHsNCrjha8NBQM1Gi/gUOjqTo -[+] Bogus user: extra_timestamp_digit_-User, SPA packet: /kDvwn7XLWqxHtp6/TDzntBVUe3K0+YDLSPRnm+1ri5NALWI/xKbGUqXMoUyaKVu9srUkIcDoCHZxdZqGEVV2KiU11odPAQw80vXDdcjX29gNuAqli+xV7vWDxTewk05Wef+WCke4DflkUjn53m64oBaJwtRkspBA +#[+] Bogus user: extra_timestamp_digit_-1, SPA packet: 9avjKfoNgP2mpAtZijmWpNrpDCJvX574BJ4lzxgyvVOLcxMm6PmDwNhmD+BJtz9kf/nMfilPFaehCOmdbzOOhmzkGYIdpMyqmjcmheO3S0lxRxY3bQ+ITzkwJnT89T639oEcadjjbR9jTkB48W4aUTxu6FZwBsWCc +#[+] Bogus user: extra_timestamp_digit_-1, SPA packet: 8EWbVXHsqjMrxoTQz1s52g0so7hdXObpM50Yygz6wwN5D8PuZ/PKo7nFhJnxylEmewuEyTB2XrMlU6WOBK9Wnbdqs5LRUDJXl5QaNFsXYBEVs/hmBkP6LWjpU6lLyujIsCELm3ACKS3mCyFy0VvvB+Q1O0wpxJV2M +#[+] Bogus user: extra_timestamp_digit_123%123, SPA packet: +5rdTQ/0VQwd8x88JEPeyTJGVrIebNqyyNpH1B4+aN8CbmUUVgvTRI7ysIkRXOXyWL8nlJqR77rMiBKj36GFnm0vwf9TEws+OzKiI3T9vQLr84/5GBSHlsmcbuSOd6mPXkUI8ZqDZsNx7wKkO0zQJ2x7EfgG1nOwk +#[+] Bogus user: extra_timestamp_digit_123$123, SPA packet: 9qqiMByuSi3cojJgs4pfJ4pbTRTmWVpSB6+E9/J9EZRt4414SVMmiDXhhEfRB69yCco3x+1qzbU62N36Emof8LXemI8qsNDpAV3PJP2BoSS3LAcganjf3Juz+4Zri4hqJ705YHu71TtX3PGZ5YvvHC2L4xlXA7nhc +#[+] Bogus user: extra_timestamp_digit_-user, SPA packet: 9ZbMqZJn2wewaWX2XGCUPbdbaeHXAcKq4pUjMH2DNh2i5JFu1TDUT4sVkptW/8CfKZAyzL4G0zP4mjY1tx70ivau80qzsz+xpJug343wpUwS/9EHq6FYMsUjjQRUx6fvN7vSl+TJzHsNCrjha8NBQM1Gi/gUOjqTo +#[+] Bogus user: extra_timestamp_digit_-User, SPA packet: /kDvwn7XLWqxHtp6/TDzntBVUe3K0+YDLSPRnm+1ri5NALWI/xKbGUqXMoUyaKVu9srUkIcDoCHZxdZqGEVV2KiU11odPAQw80vXDdcjX29gNuAqli+xV7vWDxTewk05Wef+WCke4DflkUjn53m64oBaJwtRkspBA [+] Bogus user: extra_timestamp_digit_,User, SPA packet: +J6TSdT+OqQvOUK5QhXatJQCboVNs2Lnl7IJAvlUL9dO570OUcLDpU5MxMHLTRIpRZKobOnhqMGpVZ4NPTnH636C2Ib245QM6mL4x7GOvfmBA6fhPDl/BluA+PPsDcHlL1UyIvkfba795rPNUbuJxC7JOm8NJlQtg -[+] Bogus user: extra_timestamp_digit_part1 part2, SPA packet: 9LBlQ+PpUOo1njqAkjBbqlpBK6ttHU/YClhO8OF4yyIq6Ddpsb2aXoN0bfRGEEAel7B3GcebAUJXaCobl/7fhLh8JiWqL/mXvZY7bYEpxCqyl5vH9FDiyk4vDpT/D7IsYdD8rbUtXFqkIjahD2SmiyUSvnk+Gk1Lziyu8BSdxAuIc2sEo/abCF +#[+] Bogus user: extra_timestamp_digit_part1 part2, SPA packet: 9LBlQ+PpUOo1njqAkjBbqlpBK6ttHU/YClhO8OF4yyIq6Ddpsb2aXoN0bfRGEEAel7B3GcebAUJXaCobl/7fhLh8JiWqL/mXvZY7bYEpxCqyl5vH9FDiyk4vDpT/D7IsYdD8rbUtXFqkIjahD2SmiyUSvnk+Gk1Lziyu8BSdxAuIc2sEo/abCF [+] Bogus user: extra_timestamp_digit_a:b, SPA packet: 8gJK+xu9TZcsdNX3lI1CYC5qmbg9Qd48pZtcnQKP8TqSAKNExXGUDfqNjEeS6m/r2J3deySe4wRRXuBY2FybwgwpBhw9y4vaLokyMRN3G7pXeG28NnrSpMHkpJjwVM8ilAfIleJoEctWvoGG3B36zBqNLu4riZmV0 [+] Bogus access_msg: extra_timestamp_digit_1.2.3.4, SPA packet: +fwQsBmwBM7HrfAQ8qpMWBHFrUAdQcujI3c9mijbaqprgcbl0HeP9pHje+8FJwW/6xNDSVINSYizZIEExpKVc7XmqqxqMyxZWzhqv2K+bvYG9UCM+Azc16YuCHflmaodyUFu52hdBPWR0zIkoE33gk3F307gkCXV4 [+] Bogus access_msg: extra_timestamp_digit_1.2.3.4., SPA packet: 8sWF8Hq3VxFwMLdmesh/hjavmYlNHaN8jWWFdZYtA1c00tfOs9XxZbqa0wz+ZIhqekgJ3VL2Q5+jNZWBd3OXNBQvR0AhuulA0yp3FX89ucW7ZTE5LkmlgoLEdoCpU4cwATU7t+tmn5eVaiWYBhmsV/KfXDKjaIl6s diff --git a/test/test-fwknop.pl b/test/test-fwknop.pl index b8303579..bdf7c60d 100755 --- a/test/test-fwknop.pl +++ b/test/test-fwknop.pl @@ -2677,9 +2677,12 @@ sub valid_usernames() { 'test_test', 'someuser', 'someUser', - 'USER', + 'part1 part2', + 'U%ER', 'USER001', - '00001' + -1, + '00001', + '00$01' ); return \@users; } @@ -2687,16 +2690,16 @@ sub valid_usernames() { sub fuzzing_usernames() { my @users = ( 'A'x1000, - "-1", - -1, + ",1", # pack('a', ""), - '123%123', - '123$123', - '-user', - '_user', - '-User', - ',User', - 'part1 part2', + '123>123', + '123<123', + '123' . pack('a', "\x10"), + '*-user', + '?user', + 'User+', + 'U+er', + 'part1|part2', 'a:b' ); return \@users; @@ -5704,6 +5707,7 @@ sub init() { if ($enable_perl_module_checks) { open F, "< $fuzzing_pkts_file" or die $!; while () { + next if /^#/; if (/(?:Bogus|Invalid_encoding)\s(\S+)\:\s+(.*)\,\sSPA\spacket\:\s(\S+)/) { push @{$fuzzing_spa_packets{$1}{$2}}, $3; $total_fuzzing_pkts++;