]> git.ipfire.org Git - thirdparty/shadow.git/commit
lib/chkhash.c: is_valid_hash(): Accept '*' as the hash
authorAlejandro Colomar <alx@kernel.org>
Wed, 7 Jan 2026 22:44:26 +0000 (23:44 +0100)
committerAlejandro Colomar <alx@kernel.org>
Fri, 9 Jan 2026 13:37:46 +0000 (14:37 +0100)
commite0758f361c4dd8a8ed337f49451d932c853a113f
tree925b396d3a12f8c7e0a807852ed0117d4e10ac6d
parent1a280cd26426bda9f05e8a4cb48f570788f1e719
lib/chkhash.c: is_valid_hash(): Accept '*' as the hash

This is widely accepted as an invalid hash, to remove password access
for an account (that is, no passwords will match the "hash").

Fixes: c44f1e096a19 (2025-07-20; "chpasswd: Check hash before write when using -e")
Closes: <https://github.com/shadow-maint/shadow/issues/1483>
Closes: <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1124835>
Reported-by: Chris Hofstaedtler <zeha@debian.org>
Reviewed-by: Chris Hofstaedtler <zeha@debian.org>
Cc: vinz <mmpx09@protonmail.com>
Signed-off-by: Alejandro Colomar <alx@kernel.org>
Cherry-picked-from: ddc2549f87e3 (2026-01-07; "lib/chkhash.c: is_valid_hash(): Accept '*' as the hash")
Signed-off-by: Alejandro Colomar <alx@kernel.org>
lib/chkhash.c