mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-21 03:10:25 +08:00
Apply same fix (as last commit) to SMD5 as well
This commit is contained in:
parent
8b5c9a764c
commit
c15a31b673
@ -547,8 +547,7 @@ static int chk_smd5(
|
||||
unsigned char *orig_pass = NULL;
|
||||
|
||||
/* safety check */
|
||||
if (LUTIL_BASE64_DECODE_LEN(passwd->bv_len) <
|
||||
sizeof(MD5digest)+SALT_SIZE) {
|
||||
if (LUTIL_BASE64_DECODE_LEN(passwd->bv_len) <= sizeof(MD5digest)) {
|
||||
return LUTIL_PASSWD_ERR;
|
||||
}
|
||||
|
||||
@ -560,7 +559,7 @@ static int chk_smd5(
|
||||
|
||||
rc = lutil_b64_pton(passwd->bv_val, orig_pass, passwd->bv_len);
|
||||
|
||||
if (rc < (int)(sizeof(MD5digest)+SALT_SIZE)) {
|
||||
if (rc <= (int)(sizeof(MD5digest))) {
|
||||
ber_memfree(orig_pass);
|
||||
return LUTIL_PASSWD_ERR;
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user