From 4ce5ed5f3970a1973c4cba41901294632a3c617d Mon Sep 17 00:00:00 2001 From: Rich Salz Date: Tue, 23 Jun 2015 08:14:24 -0400 Subject: [PATCH] RT3682: Avoid double-free on OCSP parse error Found by Kurt Cancemi (Manual cherry-pick of f8e427154bbc0c33f29fa7aad001b1b655e5995b) Reviewed-by: Matt Caswell --- apps/ocsp.c | 1 + 1 file changed, 1 insertion(+) diff --git a/apps/ocsp.c b/apps/ocsp.c index b858b8d3ee..926083dd1b 100644 --- a/apps/ocsp.c +++ b/apps/ocsp.c @@ -209,6 +209,7 @@ int MAIN(int argc, char **argv) OPENSSL_free(tport); if (tpath) OPENSSL_free(tpath); + thost = tport = tpath = NULL; if (args[1]) { args++; if (!OCSP_parse_url(*args, &host, &port, &path, &use_ssl)) { -- 2.25.1