Catch error condition to prevent NULL pointer dereference.

Submitted by: Goetz Babin-Ebell <babin-ebell@trustcenter.de>

PR: #766

diff --git a/apps/apps.c b/apps/apps.c
index 007e3e06c3e0858fb61bf8138cc7da5b1e69fb2e..1ab07af50be7eab4b206d834d262101e860f63fc 100644 (file)
--- a/apps/apps.c
+++ b/apps/apps.c
@@ -501,7 +501,7 @@ static int ui_read(UI *ui, UI_STRING *uis)
                        {
                        const char *password =
                                ((PW_CB_DATA *)UI_get0_user_data(ui))->password;
-                       if (password[0] != '\0')
+                       if (password && password[0] != '\0')
                                {
                                UI_set_result(ui, uis, password);
                                return 1;
@@ -525,7 +525,7 @@ static int ui_write(UI *ui, UI_STRING *uis)
                        {
                        const char *password =
                                ((PW_CB_DATA *)UI_get0_user_data(ui))->password;
-                       if (password[0] != '\0')
+                       if (password && password[0] != '\0')
                                return 1;
                        }
                default: