ntp_crypto.c:

  handle NULL return from d2i_X509() - NetBSD Run 21 Coverity CID 2979

bk: 445722c4XBi8CSNW1w62T9zFDGy0zA

diff --git a/ntpd/ntp_crypto.c b/ntpd/ntp_crypto.c
index b1351423c44864db933850a7c9ff8a94b2497465..4a64d78ceda829848ecd338c9c6b5db1a88bf4f2 100644 (file)
--- a/ntpd/ntp_crypto.c
+++ b/ntpd/ntp_crypto.c
@@ -3336,7 +3336,7 @@ cert_valid(
 
        ptr = (u_char *)cinf->cert.ptr;
        cert = d2i_X509(NULL, &ptr, ntohl(cinf->cert.vallen));
-       if (!X509_verify(cert, pkey))
+       if (cert == NULL || !X509_verify(cert, pkey))
                return (XEVNT_VFY);
 
        X509_free(cert);