summaryrefslogtreecommitdiffstats
path: root/src/responder/pam
diff options
context:
space:
mode:
authorPavel Reichl <preichl@redhat.com>2015-02-25 05:38:38 -0500
committerJakub Hrozek <jhrozek@redhat.com>2015-02-27 10:27:55 +0100
commitc5290f2175845f2c5e3f35ce279b6f52b1d51275 (patch)
treebea495d7463298ff99167a6429c13d8d10f2b3ea /src/responder/pam
parentbdc2aced1185c4ee36921fa01b8dc01789a63900 (diff)
downloadsssd-c5290f2175845f2c5e3f35ce279b6f52b1d51275.tar.gz
sssd-c5290f2175845f2c5e3f35ce279b6f52b1d51275.tar.xz
sssd-c5290f2175845f2c5e3f35ce279b6f52b1d51275.zip
PAM: check return value of confdb_get_string
Coverity found this neglect. Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/responder/pam')
-rw-r--r--src/responder/pam/pamsrv_cmd.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 2ce61881f..d0e7327d8 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -680,6 +680,12 @@ static void pam_reply(struct pam_auth_req *preq)
ret = confdb_get_string(pctx->rctx->cdb, pd, CONFDB_PAM_CONF_ENTRY,
CONFDB_PAM_ACCOUNT_EXPIRED_MESSAGE, "",
&pam_account_expired_message);
+ if (ret != EOK) {
+ DEBUG(SSSDBG_MINOR_FAILURE,
+ "Failed to get expiration message: %d:[%s].\n",
+ ret, sss_strerror(ret));
+ goto done;
+ }
inform_account_expired(pd, pam_account_expired_message);
}