Merge pull request #21904 from taosdata/fix/TS-3589

fix/TS-3589

Merge pull request #21904 from taosdata/fix/TS-3589
fix/TS-3589
e9022f24 · wade zhang · GitHub · 3c3bc57e · 1b68bfb4 · e9022f24
隐藏空白更改
内联并排

Showing with 2 addition and 1 deletion

source/dnode/mnode/impl/src/mndUser.c source/dnode/mnode/impl/src/mndUser.c +2 -1

未找到文件。
--- a/source/dnode/mnode/impl/src/mndUser.c
+++ b/source/dnode/mnode/impl/src/mndUser.c
@@ -801,7 +801,8 @@ static int32_t mndProcessAlterUserReq(SRpcMsg *pReq) {
    goto _OVER;
  }

-  if (TSDB_ALTER_USER_PASSWD == alterReq.alterType && alterReq.pass[0] == 0) {
+  if (TSDB_ALTER_USER_PASSWD == alterReq.alterType && 
+      (alterReq.pass[0] == 0 || strlen(alterReq.pass) > TSDB_PASSWORD_LEN)) {
    terrno = TSDB_CODE_MND_INVALID_PASS_FORMAT;
    goto _OVER;
  }