search

ryanries / PassFiltEx

PassFiltEx. An Active Directory Password Filter.
GNU General Public License v3.0
264 stars 50 forks source link

Crash when resetting password while blacklist does not exist #8

Closed allquixotic closed 5 years ago

allquixotic commented 5 years ago

Steps to repro:

  1. Deploy PassFiltEx normally, but don't install a dictionary; or, point the registry key to a path that does not point to an existing file.
  2. Try to reset a password.
  3. Observe that LSASS crashes.

Also reproducible using PassFiltExTest (which is in one of my PRs).

Fixed in PR #4.