user: reject requests to change full name to something including a commamcatanzaro/#83

Because real name is stored in the GECOS field of /etc/passwd, which is delimited
by commas that cannot be escaped, the user's full name must not contain a comma.

Fixes #83

1 files changed, 5 insertions, 0 deletions

diff --git a/src/user.c b/src/user.c
index aa142fc..f7340bf 100644
--- a/src/user.c
+++ b/src/user.c
@@ -894,6 +894,11 @@ user_set_real_name (AccountsUser          *auser,
                 return TRUE;
         }
 
+        if (g_utf8_strchr (real_name, -1, ',') != NULL) {
+                throw_error (context, ERROR_FAILED, "setting real name failed: real name '%s' must not contain commas", real_name);
+                return TRUE;
+        }
+
         if (accounts_user_get_uid (ACCOUNTS_USER (user)) == (uid_t) uid)
                 action_id = "org.freedesktop.accounts.change-own-user-data";
         else