Do not allow here-documents for unauthenticated CLI sessions to prevent

them from becoming an out of memory DoS.



git-svn-id: http://www.varnish-cache.org/svn/trunk/varnish-cache@5589 d4fa192b-c00b-0410-8231-f00ffab90ce4

lib/libvarnish/cli_serve.c

@@ -338,7 +338,7 @@ cls_vlu(void *priv, const char *p)
 		}
 		for (i = 1; av[i] != NULL; i++)
 			continue;
-		if (i < 3 || strcmp(av[i - 2], "<<")) {
+		if (i < 3 || cli->auth == 0 || strcmp(av[i - 2], "<<")) {
 			i = cls_vlu2(priv, av);
 			FreeArgv(av);	
 			free(cli->cmd);