[openssh-commits] [openssh] 01/01: check pw_passwd != NULL here too

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch master
in repository openssh.

commit c29b111e7d87c2324ff71c80653dd8da168c13b9
Author: Damien Miller <djm at mindrot.org>
Date:   Thu Oct 11 11:29:35 2018 +1100

    check pw_passwd != NULL here too
    
    Again, for systems with broken NIS implementations.
    
    Prompted by coolbugcheckers AT gmail.com
---
 auth-passwd.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/auth-passwd.c b/auth-passwd.c
index 65f52518..24fcb67b 100644
--- a/auth-passwd.c
+++ b/auth-passwd.c
@@ -198,6 +198,9 @@ sys_auth_passwd(struct ssh *ssh, const char *password)
 	/* Just use the supplied fake password if authctxt is invalid */
 	char *pw_password = authctxt->valid ? shadow_pw(pw) : pw->pw_passwd;
 
+	if (pw_password == NULL)
+		return 0;
+
 	/* Check for users with no password. */
 	if (strcmp(pw_password, "") == 0 && strcmp(password, "") == 0)
 		return (1);

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.