From e3206de9fb0d25691b35568723ad67a60ca01165 Mon Sep 17 00:00:00 2001 From: Robbie Harwood Date: Wed, 4 Sep 2019 13:48:14 -0400 Subject: [PATCH] Fix NULL pointer dereference in maybe_require_preauth() ipadb_get_global_config() is permitted to return NULL. Signed-off-by: Robbie Harwood Reviewed-By: Christian Heimes Reviewed-By: Rob Crittenden --- daemons/ipa-kdb/ipa_kdb_principals.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/daemons/ipa-kdb/ipa_kdb_principals.c b/daemons/ipa-kdb/ipa_kdb_principals.c index 0fe8e396b9bc011b77b183851389f6c57c70a2c9..259a0d2563f4b9c038b041781b2580fe72d7ed7e 100644 --- a/daemons/ipa-kdb/ipa_kdb_principals.c +++ b/daemons/ipa-kdb/ipa_kdb_principals.c @@ -1070,7 +1070,7 @@ static krb5_flags maybe_require_preauth(struct ipadb_context *ipactx, struct ipadb_e_data *ied; config = ipadb_get_global_config(ipactx); - if (config->disable_preauth_for_spns) { + if (config && config->disable_preauth_for_spns) { ied = (struct ipadb_e_data *)entry->e_data; if (ied && ied->ipa_user != true) { /* not a user, assume SPN */ -- 2.20.1