mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-12-22 23:59:34 -05:00
make sure we don't test against stored values starting with "{"
This commit is contained in:
parent
0fffad53c3
commit
7592a9b9c7
1 changed files with 2 additions and 1 deletions
|
|
@ -328,7 +328,8 @@ lutil_passwd(
|
|||
|
||||
#ifdef SLAPD_CLEARTEXT
|
||||
if( is_allowed_scheme("{CLEARTEXT}", schemes ) ) {
|
||||
return passwd->bv_len == cred->bv_len
|
||||
return (( passwd->bv_len == cred->bv_len ) &&
|
||||
( passwd->bv_val[0] != '{' /*'}'*/ ))
|
||||
? memcmp( passwd->bv_val, cred->bv_val, passwd->bv_len )
|
||||
: 1;
|
||||
}
|
||||
|
|
|
|||
Loading…
Reference in a new issue