From e3206de9fb0d25691b35568723ad67a60ca01165 Mon Sep 17 00:00:00 2001

From: Robbie Harwood <rharwood@redhat.com>

Date: Wed, 4 Sep 2019 13:48:14 -0400

Subject: [PATCH] Fix NULL pointer dereference in maybe_require_preauth()

ipadb_get_global_config() is permitted to return NULL.

Signed-off-by: Robbie Harwood <rharwood@redhat.com>

Reviewed-By: Christian Heimes <cheimes@redhat.com>

Reviewed-By: Rob Crittenden <rcritten@redhat.com>

---

 daemons/ipa-kdb/ipa_kdb_principals.c | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/daemons/ipa-kdb/ipa_kdb_principals.c b/daemons/ipa-kdb/ipa_kdb_principals.c

index 0fe8e396b9bc011b77b183851389f6c57c70a2c9..259a0d2563f4b9c038b041781b2580fe72d7ed7e 100644

--- a/daemons/ipa-kdb/ipa_kdb_principals.c

+++ b/daemons/ipa-kdb/ipa_kdb_principals.c

@@ -1070,7 +1070,7 @@ static krb5_flags maybe_require_preauth(struct ipadb_context *ipactx,

     struct ipadb_e_data *ied;

     config = ipadb_get_global_config(ipactx);

-    if (config->disable_preauth_for_spns) {

+    if (config && config->disable_preauth_for_spns) {

         ied = (struct ipadb_e_data *)entry->e_data;

         if (ied && ied->ipa_user != true) {

             /* not a user, assume SPN */

-- 

2.20.1