s4:kdc: Ensure that we don’t dereference a NULL pointer

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/source4/kdc/ad_claims.c b/source4/kdc/ad_claims.c
index 15b2efdf26fd81152428c3b0593ea5303d8d97cf..714f5484af55deadf33dbd42c41577dfa62a2a69 100644 (file)
--- a/source4/kdc/ad_claims.c
+++ b/source4/kdc/ad_claims.c
@@ -689,6 +689,10 @@ static NTSTATUS encode_claims_set(TALLOC_CTX *mem_ctx,
        struct CLAIMS_SET_METADATA *metadata = NULL;
        struct CLAIMS_SET_METADATA_NDR *metadata_ndr = NULL;
 
+       if (claims_blob == NULL) {
+               return NT_STATUS_INVALID_PARAMETER_3;
+       }
+
        tmp_ctx = talloc_new(mem_ctx);
        if (tmp_ctx == NULL) {
                return NT_STATUS_NO_MEMORY;