Check packet pointer in data2vp_any() before using, to allow the

attr2vp() chain to be called safely with a NULL packet.

diff --git a/src/lib/radius.c b/src/lib/radius.c
index 3453ff9..7529189 100644 (file)
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -2919,7 +2919,7 @@ static ssize_t data2vp_any(const RADIUS_PACKET *packet,
        /*
         *      Decrypt the attribute.
         */
-       if (secret) switch (vp->flags.encrypt) {
+       if (secret && packet) switch (vp->flags.encrypt) {
                /*
                 *  User-Password
                 */