mirror of
https://github.com/sheumann/hush.git
synced 2024-09-12 00:55:11 +00:00
correct_password: if password is 'x' or '*' and there is no shadow, use
fake encrypted password 'aa' (which is guaranteed to fail password check).
This commit is contained in:
parent
a48369183b
commit
54e19da86d
@ -54,13 +54,11 @@ int correct_password(const struct passwd *pw)
|
|||||||
struct spwd spw;
|
struct spwd spw;
|
||||||
struct spwd *result;
|
struct spwd *result;
|
||||||
char buffer[256];
|
char buffer[256];
|
||||||
if (getspnam_r(pw->pw_name, &spw, buffer, sizeof(buffer), &result) == 0)
|
correct = (getspnam_r(pw->pw_name, &spw, buffer, sizeof(buffer), &result)) ? "aa" : spw.sp_pwdp;
|
||||||
correct = spw.sp_pwdp;
|
|
||||||
/* else: no valid shadow password, checking ordinary one */
|
|
||||||
}
|
}
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
if (!correct || correct[0] == '\0')
|
if (!correct[0]) /* empty password field? */
|
||||||
return 1;
|
return 1;
|
||||||
|
|
||||||
fake_it:
|
fake_it:
|
||||||
|
Loading…
Reference in New Issue
Block a user