From: Daniel Stenberg <daniel@haxx.se>
Date: Thu, 22 Dec 2016 23:06:25 +0000 (+0100)
Subject: ftp-gss: check for init before use
X-Git-Tag: curl-7_53_0~148
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5fe164a258b2a8524de1bfa58e8faa082770bcdd;p=thirdparty%2Fcurl.git

ftp-gss: check for init before use

To avoid dereferencing a NULL pointer.

Reported-by: Daniel Romero
---

diff --git a/lib/security.c b/lib/security.c
index 4a8f44433f..f4a8763413 100644
--- a/lib/security.c
+++ b/lib/security.c
@@ -367,6 +367,10 @@ int Curl_sec_read_msg(struct connectdata *conn, char *buffer,
   size_t decoded_sz = 0;
   CURLcode error;
 
+  if(!conn->mech)
+    /* not inititalized, return error */
+    return -1;
+
   DEBUGASSERT(level > PROT_NONE && level < PROT_LAST);
 
   error = Curl_base64_decode(buffer + 4, (unsigned char **)&buf, &decoded_sz);