From 31de425d22c724af3674cdabdc04c2c1c1d8467b Mon Sep 17 00:00:00 2001
From: Sarah Alsmiller <sarah.alsmiller@hashicorp.com>
Date: Thu, 31 Oct 2024 11:11:26 -0500
Subject: [PATCH] add defensive line to prevent potential forever loop

---
 acl/policy_ce.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/acl/policy_ce.go b/acl/policy_ce.go
index a7fd4235d6..aa68230aaa 100644
--- a/acl/policy_ce.go
+++ b/acl/policy_ce.go
@@ -80,6 +80,9 @@ func cleanDuplicates(rules string, err error) string {
 		if len(keysubmatch) > 0 {
 			//found a match
 			match = keysubmatch[0][0]
+		} else {
+			//no match found, return error up to caller
+			return rules
 		}
 		//replace the captured block 1 time to preserve the other instance of the key, then check the cleaned string
 		//for duplicate key errors