hash_equals fails when no stored hash is available
>>> [!note] Migrated issue
<!-- Drupal.org comment -->
<!-- Migrated from issue #3390460. -->
Reported by: [jurgenhaas](https://www.drupal.org/user/168924)
>>>
<h3 id="summary-problem-motivation">Problem/Motivation</h3>
<p>In <code>\Drupal\user_hash\Services::validateHash</code> we call <code>hash_equals</code> with one value being the stored hash for the given user. That value could be NULL, then this function fails.</p>
<h3 id="summary-proposed-resolution">Proposed resolution</h3>
<p>Assert the stored value first.</p>
issue