From 09a901b104d0bbfcc43cc62cbac211f3040e87dd Mon Sep 17 00:00:00 2001 From: Phantom Voltage Date: Sat, 13 May 2017 11:44:25 -0700 Subject: [PATCH] Fixed pass-the-hash vulnerability --- dgamelaunch.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/dgamelaunch.c b/dgamelaunch.c index fc831a9..0b17154 100644 --- a/dgamelaunch.c +++ b/dgamelaunch.c @@ -2057,11 +2057,17 @@ passwordgood (char *cpw) crypted = crypt (cpw, cpw); if (crypted == NULL) return 0; + +#ifdef USE_SQLITE3 if (!strncmp (crypted, me->password, DGL_PASSWDLEN)) return 1; + +#else if (!strncmp (cpw, me->password, DGL_PASSWDLEN)) return 1; +#endif + return 0; }