[package] busybox: update to v1.13.4 (closes: #4279)

[openwrt-10.03/.git] / package / busybox / patches / 310-passwd_access.patch

diff --git a/package/busybox/patches/310-passwd_access.patch b/package/busybox/patches/310-passwd_access.patch
index 78a43d7782dfd4cb957984379dcfd04a72cd3788..f90c840bafbf5cdcb2a53603a195b0eac02b65ad 100644 (file)
--- a/package/busybox/patches/310-passwd_access.patch
+++ b/package/busybox/patches/310-passwd_access.patch
@@ -3,7 +3,7 @@
 
 --- a/networking/httpd.c
 +++ b/networking/httpd.c
-@@ -1697,21 +1697,32 @@
+@@ -1713,21 +1713,32 @@ static int check_user_passwd(const char 
  
                if (ENABLE_FEATURE_HTTPD_AUTH_MD5) {
                        char *md5_passwd;
@@ -17,7 +17,7 @@
 +
 +                              pwd = getpwnam(&md5_passwd[4]);
 +                              if(!pwd->pw_passwd || !pwd->pw_passwd[0] || pwd->pw_passwd[0] == '!')
-+                                      continue;
++                                      return 1;
 +
 +                              md5_passwd = pwd->pw_passwd;
 +                              goto check_md5_pw;