Apparently s->ctx could be NULL at this point (see earlier

test). (Coverity ID 148).

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index c1d4173b5e89207707c6181e821c6e4907ae1b18..7c2eb027eb6d0e43ae330c26e82bd2683de9b978 100644 (file)
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -1372,7 +1372,7 @@ int ssl_check_serverhello_tlsext(SSL *s)
         * tell the callback
         */
        if ((s->tlsext_status_type != -1) && !(s->tlsext_status_expected)
-                       && s->ctx->tlsext_status_cb)
+                       && s->ctx && s->ctx->tlsext_status_cb)
                {
                int r;
                /* Set resp to NULL, resplen to -1 so callback knows