Aren/haiku
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

multiuser_utils: Fixed verifying empty password.

Browse Source 
* verify_password() would accept all passwords if the there was
  none set, instead of accepting only an empty password.
This commit is contained in:
Axel Dörfler 2015-06-25 17:47:27 +02:00
parent e0fc09b439
commit cb82874e92
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/bin/multiuser/multiuser_utils.cpp
View File

@ -103,8 +103,12 @@ verify_password(passwd* passwd, spwd* spwd, const char* plainPassword)
}
// If no password is required, we're done.
if (requiredPassword == NULL || strlen(requiredPassword) == 0)
return true;
if (requiredPassword == NULL || requiredPassword[0] == '\0') {
if (plainPassword == NULL || plainPassword[0] == '\0')
return true;
return false;
}
// crypt and check it
char* encryptedPassword = crypt(plainPassword, requiredPassword);