From: Remi Tricot-Le Breton <rlebreton@haproxy.com>
Date: Mon, 23 Feb 2026 13:56:59 +0000 (+0100)
Subject: BUG/MINOR: jwt: Missing 'jwt_tokenize' return value check
X-Git-Tag: v3.4-dev7~127
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5e14904fef4856372433fc5b7e8d3de9450ec1b5;p=thirdparty%2Fhaproxy.git

BUG/MINOR: jwt: Missing 'jwt_tokenize' return value check

There was a "jwt_tokenize" call whose return value was not checked.

This was found by coverity and raised in GitHub #3277.
This patch can be backported to all stable branches.
---

diff --git a/src/sample.c b/src/sample.c
index f8150eaa5..07846caee 100644
--- a/src/sample.c
+++ b/src/sample.c
@@ -4795,7 +4795,8 @@ static int sample_conv_jwt_member_query(const struct arg *args, struct sample *s
 	int retval = 0;
 	int ret;
 
-	jwt_tokenize(&smp->data.u.str, items, &item_num);
+	if (jwt_tokenize(&smp->data.u.str, items, &item_num))
+		goto end;
 
 	if (item_num < member + 1)
 		goto end;