Merge pull request #8 from henrikolsson/master

Prevent crash in passwordgood when supplied password is one character long
This commit is contained in:
Pasi Kallinen 2015-12-09 20:46:18 +02:00
commit 6753fd6eca
1 changed files with 5 additions and 1 deletions

View File

@ -2051,9 +2051,13 @@ newuser ()
int
passwordgood (char *cpw)
{
char *crypted;
assert (me != NULL);
if (!strncmp (crypt (cpw, cpw), me->password, DGL_PASSWDLEN))
crypted = crypt (cpw, cpw);
if (crypted == NULL)
return 0;
if (!strncmp (crypted, me->password, DGL_PASSWDLEN))
return 1;
if (!strncmp (cpw, me->password, DGL_PASSWDLEN))
return 1;