The fix in commit
441cd614f9 ("BUG/MINOR: acl: set arg_list->kw to
aclkw->kw string literal if aclkw is found") involves an unchecked
access to "al" after that one is tested for possibly being NULL. This
rightfully upsets Coverity (GH #3095) and might also trigger warnings
depending on the compilers. However, no known caller to date passes
a NULL arg list here so there's no way to trigger this theoretical
bug.
This should be backported along with the fix above to avoid emitting
warnings, possibly as far as 2.6 since that fix was tagged as such.
if (aclkw) {
/* OK we have a real ACL keyword */
- al->kw = aclkw->kw;
+ if (al)
+ al->kw = aclkw->kw;
+
/* build new sample expression for this ACL */
smp = calloc(1, sizeof(*smp));
if (!smp) {