MDEV-8673 - [PATCH] Missing Sanity Check for strndup() in MariaDB 10.0.2x

Contributed by Bill Parker.

Added check for strndup() return value.

plugin/auth_pam/auth_pam.c

@@ -98,7 +98,8 @@ static int conv(int n, const struct pam_message **msg,
       if (pkt_len < 0)
         return PAM_CONV_ERR;
       /* allocate and copy the reply to the response array */
-      (*resp)[i].resp = strndup((char*)pkt, pkt_len);
+      if (!((*resp)[i].resp= strndup((char*) pkt, pkt_len)))
+        return PAM_CONV_ERR;
       param->ptr = param->buf + 1;
     }
   }