FS-8131: [mod_voicemail] fix disallowed empty password set

Prevent users to change password to an empty password when
allow-empty-password-auth is set to true.

diff --git a/src/mod/applications/mod_voicemail/mod_voicemail.c b/src/mod/applications/mod_voicemail/mod_voicemail.c
index da6180aa98b7a347b1fa082c89122e1aa925dfa7..6300211dac77b7e34988bc3d61f32cd42432e39c 100644 (file)
--- a/src/mod/applications/mod_voicemail/mod_voicemail.c
+++ b/src/mod/applications/mod_voicemail/mod_voicemail.c
@@ -2305,6 +2305,9 @@ static void voicemail_check_main(switch_core_session_t *session, vm_profile_t *p
                                                switch_event_add_header_string(params, SWITCH_STACK_BOTTOM, "VM-Domain", domain_name);
                                                switch_channel_event_set_data(channel, params);
                                                
+                                               if (zstr(buf) && !profile->allow_empty_password_auth) {
+                                                       fail = 1;
+                                               }
                                                if (switch_xml_locate_user("id", myid, domain_name, switch_channel_get_variable(channel, "network_addr"),
                                                                                                   &xx_domain_root, &xx_domain, &xx_user, NULL, params) == SWITCH_STATUS_SUCCESS) {
                                                        switch_xml_t x_result;