If pam_open_session() fails, pass its status to pam_end.

diff --git a/plugins/sudoers/auth/pam.c b/plugins/sudoers/auth/pam.c
index ddbd46aa2ca9ba1ea131b2dbca92a02d263fb84e..a6104143965a00fa6271e18936dbef45ecb8e557 100644 (file)
--- a/plugins/sudoers/auth/pam.c
+++ b/plugins/sudoers/auth/pam.c
@@ -241,7 +241,7 @@ pam_begin_session(pw, auth)
 #ifndef NO_PAM_SESSION
     status = pam_open_session(pamh, 0);
     if (status != PAM_SUCCESS) {
-       (void) pam_end(pamh, PAM_SUCCESS | PAM_DATA_SILENT);
+       (void) pam_end(pamh, status | PAM_DATA_SILENT);
        pamh = NULL;
     }
 #endif