From dedd14af5e0c0beced7e7aeb356acac06e521464 Mon Sep 17 00:00:00 2001
From: openGaussDev <xumeiting@huawei.com>
Date: Mon, 7 Mar 2022 21:58:03 +0800
Subject: [PATCH]  Do not allow creation of users with empty passwords

Offering: openGaussDev

More detail: Do not allow creation of users with empty passwords

Match-id-8cb0a708be3c4115ad5e7ac3584d3cdd83ec7b1e
---
 src/gausskernel/optimizer/commands/user.cpp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/gausskernel/optimizer/commands/user.cpp b/src/gausskernel/optimizer/commands/user.cpp
index 28ca1f82b..634d0976d 100755
--- a/src/gausskernel/optimizer/commands/user.cpp
+++ b/src/gausskernel/optimizer/commands/user.cpp
@@ -6052,6 +6052,9 @@ static Datum gs_calculate_encrypted_sm3_password(const char* password, const cha
 Datum calculate_encrypted_password(bool is_encrypted, const char* password, const char* rolname, 
                                    const char* salt_string)
 {
+    if (password == NULL || password[0] == '\0') {
+        ereport(ERROR, (errcode(ERRCODE_INVALID_PASSWORD), errmsg("The password could not be NULL.")));
+    }
     errno_t rc = EOK;
     char encrypted_md5_password[MD5_PASSWD_LEN + 1] = {0};
     Datum datum_value;