CLIENT:PAM: avoid NULL deref

This is hardly possible in the wild but should fix Coverity complain.
SSSD · Sep 30, 2024 · c66d9e8 · c66d9e8
1 parent ef2a618
commit c66d9e8
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/src/sss_client/pam_sss.c b/src/sss_client/pam_sss.c
@@ -2370,9 +2370,11 @@ static int prompt_sc_pin(pam_handle_t *pamh, struct pam_items *pi)
     ret = PAM_SUCCESS;
 
 done:
-    sss_erase_mem_securely((void *)answer, strlen(answer));
-    free(answer);
-    answer=NULL;
+    if (answer != NULL) {
+        sss_erase_mem_securely((void *)answer, strlen(answer));
+        free(answer);
+        answer=NULL;
+    }
 
     if (resp != NULL) {
         if (resp[0].resp != NULL) {