sasl: Fixed null pointer reference when decoding empty digest challenge
authorSteve Holme <steve_holme@hotmail.com>
Tue, 12 Feb 2013 22:20:44 +0000 (22:20 +0000)
committerSteve Holme <steve_holme@hotmail.com>
Tue, 12 Feb 2013 22:20:44 +0000 (22:20 +0000)
Fixed a null pointer reference when an empty challenge is passed to the
Curl_sasl_create_digest_md5_message() function.

Bug: http://sourceforge.net/p/curl/bugs/1193/
Reported by: Saran Neti

lib/curl_sasl.c

index d07387d..c3f2d43 100644 (file)
@@ -283,6 +283,9 @@ CURLcode Curl_sasl_create_digest_md5_message(struct SessionHandle *data,
   if(result)
     return result;
 
+  if(!chlg)
+    return CURLE_LOGIN_DENIED;
+
   /* Retrieve nonce string from the challenge */
   if(!sasl_digest_get_key_value(chlg, "nonce=\"", nonce,
                                 sizeof(nonce), '\"')) {