ftp-gss: check for init before use

To avoid dereferencing a NULL pointer.

Reported-by: Daniel Romero

diff --git a/lib/security.c b/lib/security.c
index 4a8f44433fa3dd039239e375ce1e1e9fe59f543c..f4a8763413b81af56d4b8218ada48ab263e13a68 100644 (file)
--- a/lib/security.c
+++ b/lib/security.c
@@ -367,6 +367,10 @@ int Curl_sec_read_msg(struct connectdata *conn, char *buffer,
   size_t decoded_sz = 0;
   CURLcode error;
 
+  if(!conn->mech)
+    /* not inititalized, return error */
+    return -1;
+
   DEBUGASSERT(level > PROT_NONE && level < PROT_LAST);
 
   error = Curl_base64_decode(buffer + 4, (unsigned char **)&buf, &decoded_sz);