Fix browser not revealing user password in some cases.

chrome/browser/password_manager/password_manager_util_win.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // windows.h must be first otherwise Win8 SDK breaks.
 #include <windows.h>
 #include <LM.h>
 #include <stddef.h>
 #include <stdint.h>
 #include <wincred.h>
@@ skipping 110 matching lines @@
     need_recheck = false;
   }
 
   if (need_recheck) {
     HANDLE handle = INVALID_HANDLE_VALUE;
 
     // Attempt to login using blank password.
     DWORD logon_result = LogonUser(username,
                                    L".",
                                    L"",
-                                   LOGON32_LOGON_NETWORK,
+                                   LOGON32_LOGON_INTERACTIVE,
                                    LOGON32_PROVIDER_DEFAULT,
                                    &handle);
 
     auto last_error = GetLastError();
     // Win XP and later return ERROR_ACCOUNT_RESTRICTION for blank password.
     if (logon_result)
       CloseHandle(handle);
 
     // In the case the password is blank, then LogonUser returns a failure,
     // handle is INVALID_HANDLE_VALUE, and GetLastError() is
@@ skipping 155 matching lines @@
         password,
         CREDUI_MAX_PASSWORD_LENGTH+1,
         &save_password,
         kCredUiDefaultFlags |
         (tries > 1 ? CREDUI_FLAGS_INCORRECT_PASSWORD : 0));
 
     if (credErr == NO_ERROR) {
       logon_result = LogonUser(username,
                                use_principalname ? NULL : L".",
                                password,
-                               LOGON32_LOGON_NETWORK,
+                               LOGON32_LOGON_INTERACTIVE,
                                LOGON32_PROVIDER_DEFAULT,
                                &handle);
       if (logon_result) {
         retval = true;
         CloseHandle(handle);
       } else {
         if (GetLastError() == ERROR_ACCOUNT_RESTRICTION &&
             wcslen(password) == 0) {
           // Password is blank, so permit.
           retval = true;
         } else {
           DLOG(WARNING) << "Unable to authenticate " << GetLastError();
         }
       }
       SecureZeroMemory(password, sizeof(password));
     }
   } while (credErr == NO_ERROR &&
            (retval == false && tries < kMaxPasswordRetries));
   return retval;
 }
 
 }  // namespace password_manager_util_win