curl/curl
1
1
Fork 0
mirror of https://github.com/curl/curl.git synced 2025-09-09 13:49:44 +03:00
Code Issues Packages Projects Releases Wiki Activity

netrc: avoid NULL deref on weird input

Browse Source 
A dynbuf that never gets populated might return a NULL, and Coverity
could find a way through like that.

Closes #17275
This commit is contained in:
Daniel Stenberg 2025-05-07 16:36:08 +02:00
parent 412d3c3dc9
commit 613436dbbb
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/netrc.c
View File

@ -247,7 +247,7 @@ static NETRCcode parsenetrc(struct store_netrc *store,
} }
break; break;
case MACDEF: case MACDEF:
if(!*tok) if(!tok || !*tok)
state = NOTHING; state = NOTHING;
break; break;
case HOSTFOUND: case HOSTFOUND: