fix busybox http auth if the root user has an empty password

SVN-Revision: 12869
master
Felix Fietkau 16 years ago
parent 7e0e4fb486
commit 51a69f3f97
  1. 4
      package/busybox/patches/310-passwd_access.patch

@ -3,7 +3,7 @@
--- a/networking/httpd.c
+++ b/networking/httpd.c
@@ -1697,21 +1697,32 @@
@@ -1697,21 +1697,32 @@ static int check_user_passwd(const char
if (ENABLE_FEATURE_HTTPD_AUTH_MD5) {
char *md5_passwd;
@ -17,7 +17,7 @@
+
+ pwd = getpwnam(&md5_passwd[4]);
+ if(!pwd->pw_passwd || !pwd->pw_passwd[0] || pwd->pw_passwd[0] == '!')
+ continue;
+ return 1;
+
+ md5_passwd = pwd->pw_passwd;
+ goto check_md5_pw;

Loading…
Cancel
Save