If pam_open_session() fails don't call pam_getenvlist() with a NULL

pam handle.

diff --git a/plugins/sudoers/auth/pam.c b/plugins/sudoers/auth/pam.c
index eec9f474f4b24f8f35767d4ee60de2e8333628e7..36ee056463185324574a9a8483c621ab4c1be7b9 100644 (file)
--- a/plugins/sudoers/auth/pam.c
+++ b/plugins/sudoers/auth/pam.c
@@ -246,6 +246,7 @@ sudo_pam_begin_session(struct passwd *pw, char **user_envp[], sudo_auth *auth)
            (void) pam_end(pamh, *pam_status | PAM_DATA_SILENT);
            pamh = NULL;
            status = AUTH_FAILURE;
+           goto done;
        }
     }