From: Rich Salz <rsalz@openssl.org>
Date: Tue, 23 Jun 2015 12:14:24 +0000 (-0400)
Subject: RT3682: Avoid double-free on OCSP parse error
X-Git-Tag: OpenSSL_1_0_2d~13
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=4ce5ed5f3970a1973c4cba41901294632a3c617d;p=oweals%2Fopenssl.git

RT3682: Avoid double-free on OCSP parse error

Found by Kurt Cancemi

(Manual cherry-pick of f8e427154bbc0c33f29fa7aad001b1b655e5995b)
Reviewed-by: Matt Caswell <matt@openssl.org>
---

diff --git a/apps/ocsp.c b/apps/ocsp.c
index b858b8d3ee..926083dd1b 100644
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -209,6 +209,7 @@ int MAIN(int argc, char **argv)
                 OPENSSL_free(tport);
             if (tpath)
                 OPENSSL_free(tpath);
+            thost = tport = tpath = NULL;
             if (args[1]) {
                 args++;
                 if (!OCSP_parse_url(*args, &host, &port, &path, &use_ssl)) {