From 7aba5d52ee609e63ede7e76ab955179e9c61244d Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Mon, 7 Sep 2015 16:23:56 +0200 Subject: [PATCH] FS-8131: [mod_voicemail] fix disallowed empty password set Prevent users to change password to an empty password when allow-empty-password-auth is set to true. --- src/mod/applications/mod_voicemail/mod_voicemail.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/mod/applications/mod_voicemail/mod_voicemail.c b/src/mod/applications/mod_voicemail/mod_voicemail.c index da6180a..6300211 100644 --- a/src/mod/applications/mod_voicemail/mod_voicemail.c +++ b/src/mod/applications/mod_voicemail/mod_voicemail.c @@ -2305,6 +2305,9 @@ static void voicemail_check_main(switch_core_session_t *session, vm_profile_t *p switch_event_add_header_string(params, SWITCH_STACK_BOTTOM, "VM-Domain", domain_name); switch_channel_event_set_data(channel, params); + if (zstr(buf) && !profile->allow_empty_password_auth) { + fail = 1; + } if (switch_xml_locate_user("id", myid, domain_name, switch_channel_get_variable(channel, "network_addr"), &xx_domain_root, &xx_domain, &xx_user, NULL, params) == SWITCH_STATUS_SUCCESS) { switch_xml_t x_result; -- 2.5.1