Zero length passwords no longer cause an assertion failure :-)

[u/mdw/putty] / ssh.c

diff --git a/ssh.c b/ssh.c
index cc20f3b..7b4bff4 100644 (file)
--- a/ssh.c
+++ b/ssh.c
@@ -1911,7 +1911,7 @@ static int do_ssh1_login(unsigned char *in, int inlen, int ispkt)
 
                     pwlen = strlen(password);
                     if (pwlen < 16) {
-                        bottom = 1;
+                        bottom = 0;    /* zero length passwords are OK! :-) */
                         top = 15;
                     } else {
                         bottom = pwlen &~ 7;