From ef8515ba82996b137c386eeb91e6f853d58a515f Mon Sep 17 00:00:00 2001
From: Patrick Schleizer <adrelanos@whonix.org>
Date: Wed, 21 May 2025 12:23:45 -0400
Subject: [PATCH] improve error handling

---
 usr/libexec/security-misc/pam-info | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/usr/libexec/security-misc/pam-info b/usr/libexec/security-misc/pam-info
index 907c684..cf50d2a 100755
--- a/usr/libexec/security-misc/pam-info
+++ b/usr/libexec/security-misc/pam-info
@@ -190,6 +190,14 @@ pam_faillock_output_count="$(printf '%s\n' "$pam_faillock_output" | wc -l)"
 ## example pam_faillock_output_count:
 ## 4
 
+if [[ "$deny" == *[!0-9]* ]]; then
+   printf '%s\n' "\
+$0: ERROR: Variable pam_faillock_output_count is not numeric. pam_faillock_output_count: '$deny'
+ERROR: Please report this bug.
+" >&2
+   exit 0
+fi
+
 ## Do not count the first two informational textual output lines (starting with "user:" and "When") if present,
 failed_login_counter=$(( pam_faillock_output_count - 2 ))