From 531e3e83c28a2fdb2270b26b2bf0333ed6e30682 Mon Sep 17 00:00:00 2001
From: Andres Morales <anmorales@google.com>
Date: Mon, 1 Jun 2015 17:23:04 -0700
Subject: [PATCH] [gatekeeperd] verify a password after enrolling successfully

Bug: 20918106
Change-Id: Ia3cb6d1375d9ee2a6e543ee97d37b7c4f0459447
---
 gatekeeperd/gatekeeperd.cpp | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/gatekeeperd/gatekeeperd.cpp b/gatekeeperd/gatekeeperd.cpp
index ad16fa5dd..c0f227929 100644
--- a/gatekeeperd/gatekeeperd.cpp
+++ b/gatekeeperd/gatekeeperd.cpp
@@ -136,6 +136,12 @@ public:
             gatekeeper::password_handle_t *handle =
                     reinterpret_cast<gatekeeper::password_handle_t *>(*enrolled_password_handle);
             store_sid(uid, handle->user_id);
+            bool rr;
+
+            // immediately verify this password so we don't ask the user to enter it again
+            // if they just created it.
+            verify(uid, *enrolled_password_handle, sizeof(password_handle_t), desired_password,
+                    desired_password_length, &rr);
         }
 
         return ret;