From 349b58bc46860255784aa5bbb6cf83776926d7d0 Mon Sep 17 00:00:00 2001
From: Andrei Mihu <andrei@heroiclabs.com>
Date: Wed, 13 Oct 2021 18:23:06 +0100
Subject: [PATCH] Fix input validation edge case in group listing operations.

---
 CHANGELOG.md        | 3 +++
 server/api_group.go | 1 +
 2 files changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 53a357168..e6ab29045 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,9 @@ The format is based on [keep a changelog](http://keepachangelog.com) and this pr
 - Match handlers are now required to implement a signal handler function.
 - Log status follow missing users at debug instead of warning level.
 
+### Fixed
+- Fix input validation edge case in group listing operations.
+
 ## [3.7.0] - 2021-09-28
 ### Added
 - New config options to enforce a single socket per user, and a single match per socket.
diff --git a/server/api_group.go b/server/api_group.go
index cedca66b6..c72c95618 100644
--- a/server/api_group.go
+++ b/server/api_group.go
@@ -852,6 +852,7 @@ func (s *ApiServer) ListGroups(ctx context.Context, in *api.ListGroupsRequest) (
 	var open *bool
 	openIn := in.GetOpen()
 	if openIn != nil {
+		open = new(bool)
 		*open = openIn.GetValue()
 	}
 
-- 
GitLab