You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
30 lines
787 B
30 lines
787 B
10 years ago
|
diff --git a/pam_oath/pam_oath.c b/pam_oath/pam_oath.c
|
||
|
|
index 8379358..e2d3363 100644
|
||
|
|
--- a/pam_oath/pam_oath.c
|
||
|
|
+++ b/pam_oath/pam_oath.c
|
||
|
|
@@ -146,6 +146,12 @@ pam_sm_authenticate (pam_handle_t * pamh,
|
||
|
|
char *query_prompt = NULL;
|
||
|
|
char *onlypasswd = strdup (""); /* empty passwords never match */
|
||
|
|
|
||
|
|
+ if (!onlypasswd)
|
||
|
|
+ {
|
||
|
|
+ retval = PAM_BUF_ERR;
|
||
|
|
+ goto done;
|
||
|
|
+ }
|
||
|
|
+
|
||
|
|
parse_cfg (flags, argc, argv, &cfg);
|
||
|
|
|
||
|
|
retval = pam_get_user (pamh, &user, NULL);
|
||
|
|
@@ -265,6 +271,11 @@ pam_sm_authenticate (pam_handle_t * pamh,
|
||
|
|
{
|
||
|
|
free (onlypasswd);
|
||
|
|
onlypasswd = strdup (password);
|
||
|
|
+ if (!onlypasswd)
|
||
|
|
+ {
|
||
|
|
+ retval = PAM_BUF_ERR;
|
||
|
|
+ goto done;
|
||
|
|
+ }
|
||
|
|
|
||
|
|
/* user entered their system password followed by generated OTP? */
|
||
|
|
|