[patch] pam-pgsql-0.7.3.1-nullpassword.patch

pam-pgsql-0.7.3.1-nullpassword.patch (text/plain), 442 bytes, created by Samuel Damashek (RETIRED) on 2013-12-23 03:55:05 UTC

--- src/backend_pgsql.c
+++ src/backend_pgsql.c
@@ -258,7 +258,7 @@
 	if(pg_execParam(conn, &res, options->query_auth, service, user, passwd, rhost) == PAM_SUCCESS) {
 		if(PQntuples(res) == 0) {
 			rc = PAM_USER_UNKNOWN;
-		} else {
+		} else if(!PQgetisnull(res, 0, 0)) {
 			char *stored_pw = PQgetvalue(res, 0, 0);
 			if (!strcmp(stored_pw, (tmp = password_encrypt(options, user, passwd, stored_pw)))) rc = PAM_SUCCESS;
 			free (tmp);