From 84b671d585817d45162ce518b5b0375f35cacad7 Mon Sep 17 00:00:00 2001 From: Ethan O'Brien <77750390+ethanaobrien@users.noreply.github.com> Date: Fri, 3 May 2024 17:50:05 -0500 Subject: [PATCH] Add length check --- src/router/userdata/mod.rs | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/router/userdata/mod.rs b/src/router/userdata/mod.rs index 1e70cb3..4179065 100644 --- a/src/router/userdata/mod.rs +++ b/src/router/userdata/mod.rs @@ -288,6 +288,9 @@ fn verify_password(password: &str, salted_hash: &str) -> bool { return password == salted_hash; } let bytes = bytes.unwrap(); + if bytes.len() < 17 { + return password == salted_hash; + } let (salt, hashed_password) = bytes.split_at(16); let hashed_password = &hashed_password[0..32];