Adds guard in session ACL check in case session is not found.

Fixes #2624.
hashicorp · Apr 13, 2017 · 76c1e2d · 76c1e2d
1 parent d549c9c
commit 76c1e2d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/consul/session_endpoint.go b/consul/session_endpoint.go
@@ -43,6 +43,9 @@ func (s *Session) Apply(args *structs.SessionRequest, reply *string) error {
 			state := s.srv.fsm.State()
 			_, existing, err := state.SessionGet(nil, args.Session.ID)
 			if err != nil {
+				return fmt.Errorf("Session lookup failed: %v", err)
+			}
+			if existing == nil {
 				return fmt.Errorf("Unknown session %q", args.Session.ID)
 			}
 			if !acl.SessionWrite(existing.Node) {