From: Vsevolod Stakhov <vsevolod@rspamd.com>
Date: Fri, 3 Oct 2025 11:08:26 +0000 (+0100)
Subject: [Fix] Add nil check for vault_data in show_handler
X-Git-Tag: 3.13.2~8^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=efe9d027c71029c16967eb4a06d7720bbc141445;p=thirdparty%2Frspamd.git

[Fix] Add nil check for vault_data in show_handler

Prevent runtime errors when parsing Vault KV v2 responses if obj.data.data is nil.
This adds a safety check before accessing vault_data.selectors, consistent with
other handlers in the file (newkey_handler and roll_handler).
---

diff --git a/lualib/rspamadm/vault.lua b/lualib/rspamadm/vault.lua
index 300e7fd183..d17725086d 100644
--- a/lualib/rspamadm/vault.lua
+++ b/lualib/rspamadm/vault.lua
@@ -242,7 +242,10 @@ local function show_handler(opts, domain)
       -- For KV v2, data is nested under obj.data.data
       -- For KV v1, data is under obj.data
       local vault_data = opts.kv_version == 2 and obj.data.data or obj.data
-      return vault_data.selectors
+      if vault_data then
+        return vault_data.selectors
+      end
+      return nil
     end)
   end
 end