From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 14 Dec 2017 18:10:15 +0000 (-0500)
Subject: check for NULL in tls_global_version_check()
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=985352919a5f2102d53aaa63fd69ea9ba61809e6;p=thirdparty%2Ffreeradius-server.git

check for NULL in tls_global_version_check()
---

diff --git a/src/lib/tls/global.c b/src/lib/tls/global.c
index 0cb9e5e983e..9bab45899ff 100644
--- a/src/lib/tls/global.c
+++ b/src/lib/tls/global.c
@@ -273,6 +273,14 @@ int tls_global_version_check(char const *acknowledged)
 	bool bad = false;
 	size_t i;
 
+	/*
+	 *	Didn't get passed anything, that's an error.
+	 */
+	if (!acknowledged || !*acknowledged) {
+		ERROR("Refusing to start until 'allow_vulnerable_openssl' is given a value");
+		return -1;
+	}
+
 	if (strcmp(acknowledged, "yes") == 0) return 0;
 
 	/* Check for bad versions */