wok-undigest rev 537

busybox/httpd: check system passwords (again)
author Pascal Bellard <pascal.bellard@slitaz.org>
date Sat Nov 05 14:18:43 2011 +0100 (2011-11-05)
parents 2a1f81cb1dfb
children 2686f33e3494
files busybox/stuff/busybox-1.19-httpd.u
line diff
     1.1 --- a/busybox/stuff/busybox-1.19-httpd.u	Sat Nov 05 14:10:28 2011 +0100
     1.2 +++ b/busybox/stuff/busybox-1.19-httpd.u	Sat Nov 05 14:18:43 2011 +0100
     1.3 @@ -27,7 +27,7 @@
     1.4  +		passwd = strchr(cur->after_colon, ':');
     1.5  +
     1.6  +		if (passwd && passwd[1] == '*' && passwd[2] == 0) {
     1.7 -+			pw = getpwnam(remoteuser);
     1.8 ++			struct passwd *pw = getpwnam(remoteuser);
     1.9  +			/* Don't check the password if password entry is empty (!) */
    1.10  +			if (pw && pw->pw_passwd[0] != '!' && pw->pw_passwd[0] != '*' &&
    1.11  +			    (!pw->pw_passwd[0] || correct_password(pw)))