RT3682: Avoid double-free on OCSP parse error

Found by Kurt Cancemi.

Reviewed-by: Matt Caswell <matt@openssl.org>

diff --git a/apps/ocsp.c b/apps/ocsp.c
index 5d3e646f81339ad8ffed7fb99a7199748876844c..b6397b8f77dcbfc073c36491444624942047d664 100644 (file)
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -275,6 +275,7 @@ int ocsp_main(int argc, char **argv)
             OPENSSL_free(thost);
             OPENSSL_free(tport);
             OPENSSL_free(tpath);
             OPENSSL_free(thost);
             OPENSSL_free(tport);
             OPENSSL_free(tpath);

+            thost = tport = tpath = NULL;

             if (!OCSP_parse_url(opt_arg(), &host, &port, &path, &use_ssl)) {
                 BIO_printf(bio_err, "%s Error parsing URL\n", prog);
                 goto end;
             if (!OCSP_parse_url(opt_arg(), &host, &port, &path, &use_ssl)) {
                 BIO_printf(bio_err, "%s Error parsing URL\n", prog);
                 goto end;