From 43bdb7ce04c9cb00bdf0f5dda818b077b9dc7c56 Mon Sep 17 00:00:00 2001
From: Andrey Kovalev <ded@altlinux.org>
Date: Fri, 18 Oct 2024 10:25:17 +0300
Subject: pam_get_authtok*: disallow setting pamh to NULL

This also prevents a potential NULL pointer dereference in
pam_get_authtok_internal and pam_get_authtok_verify when
the pamh argument they access is set to NULL.
---
 doc/man/pam_get_authtok.3.xml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

(limited to 'doc')

diff --git a/doc/man/pam_get_authtok.3.xml b/doc/man/pam_get_authtok.3.xml
index ba6d955e..60e0a451 100644
--- a/doc/man/pam_get_authtok.3.xml
+++ b/doc/man/pam_get_authtok.3.xml
@@ -210,7 +210,8 @@
         <term>PAM_SYSTEM_ERR</term>
         <listitem>
            <para>
-             No space for an authentication token was provided.
+             A NULL pointer was specified as the PAM handle, or
+             no space for an authentication token was provided.
           </para>
         </listitem>
       </varlistentry>
@@ -242,4 +243,4 @@
     </para>
   </refsect1>
 
-</refentry>
\ No newline at end of file
+</refentry>
-- 
cgit v1.2.3