From: Rich Salz <rsalz@akamai.com>
Date: Sat, 13 Jun 2015 13:29:10 +0000 (-0400)
Subject: RT3682: Avoid double-free on OCSP parse error
X-Git-Tag: OpenSSL_1_1_0-pre1~962
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=4b8d8e2ad30e773e2229775ab0b8c35deb5e7c1c;p=openssl

RT3682: Avoid double-free on OCSP parse error

Found by Kurt Cancemi.

Reviewed-by: Matt Caswell <matt@openssl.org>
---

diff --git a/apps/ocsp.c b/apps/ocsp.c
index 5d3e646f81..b6397b8f77 100644
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -275,6 +275,7 @@ int ocsp_main(int argc, char **argv)
             OPENSSL_free(thost);
             OPENSSL_free(tport);
             OPENSSL_free(tpath);
+            thost = tport = tpath = NULL;
             if (!OCSP_parse_url(opt_arg(), &host, &port, &path, &use_ssl)) {
                 BIO_printf(bio_err, "%s Error parsing URL\n", prog);
                 goto end;