auth: db-lua - Check for nil in auth_request_lua_password_verify()

Avoids crash if script calls the function with nil values.

diff --git a/src/auth/db-lua.c b/src/auth/db-lua.c
index e086307c2ece1830c1c38b1ee845bb661cde95a9..c0b22d73728879f85c374da996c8df8354fc7f78 100644 (file)
--- a/src/auth/db-lua.c
+++ b/src/auth/db-lua.c
@@ -193,6 +193,10 @@ static int auth_request_lua_password_verify(lua_State *L)
        const unsigned char *raw_password = NULL;
        size_t raw_password_size;
        int ret;
+       if (crypted_password == NULL)
+               return luaL_error(L, "Crypted password must not be nil");
+       if (plain_password == NULL)
+               return luaL_error(L, "Plain password must not be nil");
        struct password_generate_params gen_params = {
                .user = request->fields.original_username,
                .rounds = 0