documented buf when parsing a password containing a comma