From 73aa4b8a8b7352679a9c1e5ef900824be7b8f37c Mon Sep 17 00:00:00 2001

From: Jan Cholasta <jcholast@redhat.com>

Date: Wed, 5 Nov 2014 08:44:05 +0000

Subject: [PATCH] Fix possible NULL dereference in ipa-kdb

https://fedorahosted.org/freeipa/ticket/4651

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

---

 daemons/ipa-kdb/ipa_kdb_mspac.c | 8 +++++---

 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/daemons/ipa-kdb/ipa_kdb_mspac.c b/daemons/ipa-kdb/ipa_kdb_mspac.c

index 084b689d459f27e72d679d37e24650149973df61..c8f6c76fb5b3bc7d47ec8a1551579d53d226027e 100644

--- a/daemons/ipa-kdb/ipa_kdb_mspac.c

+++ b/daemons/ipa-kdb/ipa_kdb_mspac.c

@@ -1888,9 +1888,11 @@ void get_authz_data_types(krb5_context context, krb5_db_entry *entry,

         }

         ipactx = ipadb_get_context(context);

-        gcfg = ipadb_get_global_config(ipactx);

-        if (gcfg != NULL)

-            tmp = gcfg->authz_data;

+        if (ipactx != NULL) {

+            gcfg = ipadb_get_global_config(ipactx);

+            if (gcfg != NULL)

+                tmp = gcfg->authz_data;

+        }

         if (ipactx == NULL || tmp == NULL) {

             krb5_klog_syslog(LOG_ERR, "No default authorization data types " \

                                       "available, no authorization data will " \

-- 

2.1.0