1 files changed, 4 insertions, 0 deletions
diff --git a/src/backend/taler-merchant-httpd_private-patch-instances-ID.c b/src/backend/taler-merchant-httpd_private-patch-instances-ID.c
index 188a3ee6..b8e0052d 100644
--- a/src/backend/taler-merchant-httpd_private-patch-instances-ID.c
+++ b/src/backend/taler-merchant-httpd_private-patch-instances-ID.c
@@ -150,10 +150,13 @@ patch_instances_ID (struct TMH_MerchantInstance *mi,
   }
 
   if (! TMH_payto_uri_array_valid (payto_uris))
+  {
+    GNUNET_JSON_parse_free (spec);
     return TALER_MHD_reply_with_error (connection,
                                        MHD_HTTP_BAD_REQUEST,
                                        TALER_EC_GENERIC_PAYTO_URI_MALFORMED,
                                        NULL);
+  }
   for (unsigned int i = 0; i<MAX_RETRIES; i++)
   {
     /* Cleanup after earlier loops */
@@ -318,6 +321,7 @@ patch_instances_ID (struct TMH_MerchantInstance *mi,
                     "Adding NEW account `%s'\n",
                     ad.payto_uri);
         wm = TMH_setup_wire_account (ad.payto_uri);
+        GNUNET_assert (NULL != wm); /* checked payto_uri validity earlier */
         GNUNET_CONTAINER_DLL_insert (wm_head,
                                      wm_tail,
                                      wm);