Don't double-free X509 certificates. This patch looks wrong, but it isn't.

diff --git a/mutt_ssl.c b/mutt_ssl.c
index 52b02065f3c11cfbcb52eabafc3319281dc82f79..b670f276357c0cce36990f6eaa6e3e81b1d97dce 100644 (file)
--- a/mutt_ssl.c
+++ b/mutt_ssl.c
@@ -577,11 +577,11 @@ static int check_certificate_by_digest (X509 *peercert)
   while ((cert = READ_X509_KEY (fp, &cert)) != NULL)
   {
     pass = compare_certificates (cert, peercert, peermd, peermdlen) ? 0 : 1;
-    X509_free (cert);
     
     if (pass)
       break;
   }
+  X509_free (cert);
   fclose (fp);
 
   return pass;