securityd-55199.3.tar.gz

[apple/securityd.git] / src / tokenacl.cpp

diff --git a/src/tokenacl.cpp b/src/tokenacl.cpp
index 0fe9955afd9f43aa02131ec5fee7859e883adb27..9d7c1d6524a3320a65d0493fb8fd186e5a75bbe5 100644 (file)
--- a/src/tokenacl.cpp
+++ b/src/tokenacl.cpp
@@ -183,7 +183,8 @@ void TokenAcl::pinChange(unsigned int pin, CSSM_ACL_HANDLE handle, TokenDatabase
        QueryNewPin query(pin, handle, database, SecurityAgent::changePassphrase);
        query.inferHints(Server::process());
        CssmAutoData newPin(Allocator::standard(Allocator::sensitive));
-       switch (query(newPin)) {
+    CssmAutoData oldPin(Allocator::standard(Allocator::sensitive));
+       switch (query(oldPin, newPin)) {
        case SecurityAgent::noReason:           // worked
                return;
        default: