From 8132fe11b320b6c73bd5fc8de37dd1d6a8f9a8da Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Tue, 17 May 2016 09:14:06 +0200 Subject: openssl: get_cert_chain: avoid NULL dereference CID 1361811: Explicit null dereferenced (FORWARD_NULL) --- lib/vtls/openssl.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c index 6b70c0ccc..93373e03d 100644 --- a/lib/vtls/openssl.c +++ b/lib/vtls/openssl.c @@ -2385,10 +2385,12 @@ static CURLcode get_cert_chain(struct connectdata *conn, X509_get0_signature(&psig, &palg, x); X509_signature_print(mem, palg, a); ASN1_STRING_free(a); - } - i2a_ASN1_OBJECT(mem, palg->algorithm); - push_certinfo("Public Key Algorithm", i); + if(palg) { + i2a_ASN1_OBJECT(mem, palg->algorithm); + push_certinfo("Public Key Algorithm", i); + } + } X509V3_ext(data, i, X509_get0_extensions(x)); } #else -- cgit v1.2.3