# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1445169615 -7200
# Node ID 494938dec5d803c22d286db3ed84b7ef9e05a341
# Parent  047becf393caaaffb513a7e1329324954c1e6b39
MUC: Reject muc:admin query with missing <item> child

diff -r 047becf393ca -r 494938dec5d8 plugins/muc/muc.lib.lua
--- a/plugins/muc/muc.lib.lua	Sat Oct 17 19:31:43 2015 +0200
+++ b/plugins/muc/muc.lib.lua	Sun Oct 18 14:00:15 2015 +0200
@@ -723,6 +723,9 @@
 
 function room_mt:handle_admin_query_set_command(origin, stanza)
 	local item = stanza.tags[1].tags[1];
+	if not item then
+		origin.send(st.error_reply(stanza, "cancel", "bad-request"));
+	end
 	if item.attr.jid then -- Validate provided JID
 		item.attr.jid = jid_prep(item.attr.jid);
 		if not item.attr.jid then