check_cert_policy does not check strpbrk ret val for NULL
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Safari
	Nov 19 2015, 1:56 PM

Description

p = strpbrk (allowed, " :\n");

if (!*p || p == allowed)

Safari added a subscriber: Safari.

If you check the do-while above you will notice that after the loop LINE is
guaranteed to always end with a LF. Thus strpbrk will always succeed.

• werner claimed this task.