- (djm) Fix OSF SIA auth NULL pointer deref. Report from Mike Battersby

[openssh.git] / auth1.c

diff --git a/auth1.c b/auth1.c
index ee7aac4824b2743a8f61eea676f41c20c1998a7e..405357ba0b4eac0dd5eea0045b3ea080101530db 100644 (file)
--- a/auth1.c
+++ b/auth1.c
@@ -267,9 +267,9 @@ do_authloop(Authctxt *authctxt)
                        /* Do SIA auth with password */
                        if (sia_validate_user(NULL, saved_argc, saved_argv,
                            get_canonical_hostname(options.reverse_mapping_check),
-                           pw->pw_name, NULL, 0, NULL, password) == SIASUCCESS) {
+                           authctxt->user?authctxt->user:"NOUSER", NULL, 
+                           0, NULL, password) == SIASUCCESS)
                                authenticated = 1;
-                       }
 #else /* !USE_PAM && !HAVE_OSF_SIA */
                        /* Try authentication with the password. */
                        authenticated = auth_password(pw, password);