From a90ea8f7cbac625ad28eb64a280e1a3660bdbc7c Mon Sep 17 00:00:00 2001 From: Andreas Schneider Date: Mon, 19 Sep 2016 15:56:01 +0200 Subject: [PATCH] auth: Do not set emtpy passwords for credentials Signed-off-by: Andreas Schneider --- auth/credentials/credentials.c | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/auth/credentials/credentials.c b/auth/credentials/credentials.c index 4663185c979a..d5ab80636169 100644 --- a/auth/credentials/credentials.c +++ b/auth/credentials/credentials.c @@ -796,8 +796,15 @@ _PUBLIC_ void cli_credentials_parse_string(struct cli_credentials *credentials, uname = talloc_strdup(credentials, data); if ((p = strchr_m(uname,'%'))) { - *p = 0; - cli_credentials_set_password(credentials, p+1, obtained); + const char *password; + + *p = '\0'; + password = p + 1; + if (password[0] != '\0') { + cli_credentials_set_password(credentials, + password, + obtained); + } } if ((p = strchr_m(uname,'@'))) { -- 2.34.1