Sanitize the old and user values before the check.

See also: https://fedorahosted.org/libpwquality/ticket/1

1 files changed, 7 insertions, 0 deletions

diff --git a/src/check.c b/src/check.c
index 8b59f2f..7068958 100644
--- a/src/check.c
+++ b/src/check.c
@@ -503,6 +503,13 @@ password_check(pwquality_settings_t *pwq,
         char *oldmono = NULL, *newmono, *wrapped = NULL;
         char *usermono = NULL;
 
+        /* Sanitize the old and user values */
+        if (old && *old = '\0')
+                old = NULL;
+
+        if (user && *user = '\0')
+                user = NULL;
+
         newmono = str_lower(x_strdup(new));
         if (!newmono)
                 rv = PWQ_ERROR_MEM_ALLOC;