cut&paste error in api_SetUserPassword() ?

[Volker Lendecke]

Hi!

Attached find a patch for what I find to be a very likely
cut&paste error.

Does anybody know if we have a test for this case? To me it
seems it's a bit unlikely we actually have to use
strlen(pass1) and strlen(pass2) in this code piece. The
code to me seems to indicate we got raw hashes, which might
contain 0-bytes.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de