commit b8958f33de58347189a0672e057e56638e8df03c
from: Martijn van Duren <martijn@openbsd.org>
date: Tue Apr 12 08:48:07 2022 UTC

Make sure osmtpd_ltok_skip_hexdig doesn't derefences NULL

commit - b5876c8488040d0fa4c03050d80570a2827546ac
commit + b8958f33de58347189a0672e057e56638e8df03c
blob - d543715e91c57826e1d23ae0f752c984f0291275
blob + a80fe73155a15ab043e1a707f959f87e196668da
--- ltok.c
+++ ltok.c
@@ -96,10 +96,10 @@ osmtpd_ltok_skip_hexdig(const char *ptr, int optional)
 
 	if ((ptr = osmtpd_ltok_skip_digit(ptr, 0)) != NULL)
 		return ptr;
-	l = tolower(ptr[0]);
+	l = tolower(start[0]);
 	if (l == 'a' || l == 'b' || l == 'c' || l == 'd' ||
 	    l == 'e' || l == 'f')
-		return ptr + 1;
+		return start + 1;
 	return optional ? start : NULL;
 }