summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon MacMullen <simon@rabbitmq.com>2013-04-29 16:54:58 +0100
committerSimon MacMullen <simon@rabbitmq.com>2013-04-29 16:54:58 +0100
commit966811099565d21bd0d3f57c0aaf44fba28aef5d (patch)
treeed77facb86c5bffd5557405c892a847320827bd8
parentb69d00ed8e9de3860c1e5c2d8d56a5853c64edc5 (diff)
downloadrabbitmq-server-bug25535.tar.gz
If there is no password, refuse access rather than blowing up.bug25535
-rw-r--r--src/rabbit_auth_backend_internal.erl4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/rabbit_auth_backend_internal.erl b/src/rabbit_auth_backend_internal.erl
index 44231f7b..3db8e2c3 100644
--- a/src/rabbit_auth_backend_internal.erl
+++ b/src/rabbit_auth_backend_internal.erl
@@ -203,7 +203,9 @@ hash_password(Cleartext) ->
<<Salt/binary, Hash/binary>>.
check_password(Cleartext, <<Salt:4/binary, Hash/binary>>) ->
- Hash =:= salted_md5(Salt, Cleartext).
+ Hash =:= salted_md5(Salt, Cleartext);
+check_password(_Cleartext, _Any) ->
+ false.
make_salt() ->
{A1,A2,A3} = now(),