From 8899c751e5894d2967845ca25dee19e68e248fad Mon Sep 17 00:00:00 2001
From: nicm <nicm>
Date: Mon, 9 Mar 2026 14:31:41 +0000
Subject: [PATCH] Check for NULL value in tilde expansion before dereferencing,
 from Renaud Allard in GitHub issue 4916.

---
 cmd-parse.y | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/cmd-parse.y b/cmd-parse.y
index 215943b1..542f37d1 100644
--- a/cmd-parse.y
+++ b/cmd-parse.y
@@ -1604,7 +1604,9 @@ yylex_token_tilde(char **buf, size_t *len)
 
 	if (*name == '\0') {
 		envent = environ_find(global_environ, "HOME");
-		if (envent != NULL && *envent->value != '\0')
+		if (envent != NULL &&
+		    envent->value != NULL &&
+		    *envent->value != '\0')
 			home = envent->value;
 		else if ((pw = getpwuid(getuid())) != NULL)
 			home = pw->pw_dir;