From a887de92ce99f30739f96d0df7a4d62716cbb98e Mon Sep 17 00:00:00 2001
From: Bram Matthys <syzop@vulnscan.org>
Date: Sun, 25 Jan 2026 12:56:52 +0100
Subject: [PATCH] Add extra safety in register_user() against shunned users.

---
 src/modules/nick.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/modules/nick.c b/src/modules/nick.c
index 019867f50..0cf7db7c1 100644
--- a/src/modules/nick.c
+++ b/src/modules/nick.c
@@ -1023,6 +1023,10 @@ int _register_user(Client *client)
 #endif
 	}
 
+	/* Don't allow shunned users in */
+	if (IsShunned(client))
+		return 0;
+
 	/* Set client->local->sockhost:
 	 * First deal with the special 'localhost' case and
 	 * then with generic setting based on DNS.