Be careful not to deref user_stat if it is NULL. This cannot currently

happen in sudo but might in other programs using the parser.

diff --git a/plugins/sudoers/match.c b/plugins/sudoers/match.c
index a3b65de1fcadcedabdf5d217cb07ec968613b135..8e06a4d5c6658efb918a5d0448ededac171aec31 100644 (file)
--- a/plugins/sudoers/match.c
+++ b/plugins/sudoers/match.c
@@ -580,8 +580,9 @@ command_matches_dir(char *sudoers_dir, size_t dlen)
        if (strcmp(user_base, dent->d_name) != 0 ||
            stat(buf, &sudoers_stat) == -1)
            continue;
-       if (user_stat->st_dev == sudoers_stat.st_dev &&
-           user_stat->st_ino == sudoers_stat.st_ino) {
+       if (user_stat == NULL ||
+           (user_stat->st_dev == sudoers_stat.st_dev &&
+           user_stat->st_ino == sudoers_stat.st_ino)) {
            efree(safe_cmnd);
            safe_cmnd = estrdup(buf);
            break;