mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-12-23 08:09:34 -05:00
make sure we don't test against stored values starting with "{"
This commit is contained in:
parent
0fffad53c3
commit
7592a9b9c7
1 changed files with 2 additions and 1 deletions
|
|
@ -328,7 +328,8 @@ lutil_passwd(
|
||||||
|
|
||||||
#ifdef SLAPD_CLEARTEXT
|
#ifdef SLAPD_CLEARTEXT
|
||||||
if( is_allowed_scheme("{CLEARTEXT}", schemes ) ) {
|
if( is_allowed_scheme("{CLEARTEXT}", schemes ) ) {
|
||||||
return passwd->bv_len == cred->bv_len
|
return (( passwd->bv_len == cred->bv_len ) &&
|
||||||
|
( passwd->bv_val[0] != '{' /*'}'*/ ))
|
||||||
? memcmp( passwd->bv_val, cred->bv_val, passwd->bv_len )
|
? memcmp( passwd->bv_val, cred->bv_val, passwd->bv_len )
|
||||||
: 1;
|
: 1;
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue