From e6c1e773d9e506ead2a9fd5fc0f31dceca5e2784 Mon Sep 17 00:00:00 2001
From: Steve Holme <steve_holme@hotmail.com>
Date: Tue, 12 Feb 2013 22:20:44 +0000
Subject: sasl: Fixed null pointer reference when decoding empty digest
 challenge

Fixed a null pointer reference when an empty challenge is passed to the
Curl_sasl_create_digest_md5_message() function.

Bug: http://sourceforge.net/p/curl/bugs/1193/
Reported by: Saran Neti
---
 lib/curl_sasl.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/curl_sasl.c b/lib/curl_sasl.c
index d07387d47..c3f2d43f0 100644
--- a/lib/curl_sasl.c
+++ b/lib/curl_sasl.c
@@ -283,6 +283,9 @@ CURLcode Curl_sasl_create_digest_md5_message(struct SessionHandle *data,
   if(result)
     return result;
 
+  if(!chlg)
+    return CURLE_LOGIN_DENIED;
+
   /* Retrieve nonce string from the challenge */
   if(!sasl_digest_get_key_value(chlg, "nonce=\"", nonce,
                                 sizeof(nonce), '\"')) {
-- 
cgit v1.2.3