From cb09267ed9e377491aa3f9cdc91a13b180f4952f Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Wed, 4 Jan 2023 02:07:25 -0600
Subject: [PATCH] kdc: Fix deref-before-NULL-check in _kdc_db_fetch()

---
 kdc/misc.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/kdc/misc.c b/kdc/misc.c
index e2805ad2e..6a8a8933a 100644
--- a/kdc/misc.c
+++ b/kdc/misc.c
@@ -139,7 +139,8 @@ _kdc_db_fetch(krb5_context context,
     krb5_const_principal princ;
 
     *h = NULL;
-    *db = NULL;
+    if (db)
+        *db = NULL;
 
     if (!name_type_ok(context, config, principal))
         return HDB_ERR_NOENTRY;