From 956ec310e8a83db8ef89e27578a4470de980fc8d Mon Sep 17 00:00:00 2001 From: Henrik Olsson Date: Sun, 6 Jul 2014 13:36:07 +0200 Subject: [PATCH] Prevent crash in passwordgood when supplied password is one character long --- dgamelaunch.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/dgamelaunch.c b/dgamelaunch.c index fbf6ef5..d6f3ee6 100644 --- a/dgamelaunch.c +++ b/dgamelaunch.c @@ -2051,9 +2051,13 @@ newuser () int passwordgood (char *cpw) { + char *crypted; assert (me != NULL); - if (!strncmp (crypt (cpw, cpw), me->password, DGL_PASSWDLEN)) + crypted = crypt (cpw, cpw); + if (crypted == NULL) + return 0; + if (!strncmp (crypted, me->password, DGL_PASSWDLEN)) return 1; if (!strncmp (cpw, me->password, DGL_PASSWDLEN)) return 1;