auth: Check for NULL auth token

Makes static analysers happy

diff --git a/src/auth/mech-dovecot-token.c b/src/auth/mech-dovecot-token.c
index a940d53518b293ffba73931a0d7a14ef0392ca02..8f63e028d8f6a17315338b49039d8f710e58af24 100644 (file)
--- a/src/auth/mech-dovecot-token.c
+++ b/src/auth/mech-dovecot-token.c
@@ -51,7 +51,8 @@ mech_dovecot_token_auth_continue(struct auth_request *request,
                const char *valid_token =
                        auth_token_get(service, pid, request->user, session_id);
 
-               if (strcmp(auth_token, valid_token) == 0) {
+               if (auth_token != NULL &&
+                   strcmp(auth_token, valid_token) == 0) {
                        request->passdb_success = TRUE;
                        auth_request_success(request, NULL, 0);
                } else {