crm_ipc_buffer(crm_ipc_t * client)
{
    CRM_ASSERT(client != NULL);
    return client->buffer + sizeof(struct crm_ipc_response_header);
}

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.