check for NULL return from shadow_pw()
probably unreachable on this platform; pointed out by coolbugcheckers AT gmail.com
This commit is contained in:
parent
acc59cbe7a
commit
fe8e8f349a
|
@ -60,6 +60,9 @@ sys_auth_passwd(struct ssh *ssh, const char *password)
|
|||
/* Just use the supplied fake password if authctxt is invalid */
|
||||
char *pw_password = authctxt->valid ? shadow_pw(pw) : pw->pw_passwd;
|
||||
|
||||
if (pw_password == NULL)
|
||||
return 0;
|
||||
|
||||
/* Check for users with no password. */
|
||||
if (strcmp(pw_password, "") == 0 && strcmp(password, "") == 0)
|
||||
return (1);
|
||||
|
|
Loading…
Reference in New Issue