> - * Validate connection info string, and determine whether it might
> cause
> - * local filesystem access to be attempted.
> + * The function
> + * 1. validates connection info string and
> + * 2. checks a password is provided if must_use_password is true.
>
> IMO, "Validate connection info string" is sufficient. The mention of
> must_use_password is redundant since it's explained in the latter part
> of
> the comment.
That is reasonable for me. I've removed the second one.
The modified patch is attached.
Regards,
Rintaro Ikeda