EVP_MD_CTX_create() calls malloc and can return NULL. However, only one of

the calls in libssl actually checks the return value before using it. Add
NULL checks for the remaining three calls.

ok miod@

1 files changed, 1 insertions, 1 deletions

diff --git a/src/lib/libssl/ssl_lib.c b/src/lib/libssl/ssl_lib.c
index bf98354294..12d45ea025 100644
--- a/src/lib/libssl/ssl_lib.c
+++ b/src/lib/libssl/ssl_lib.c
@@ -3235,7 +3235,7 @@ ssl_replace_hash(EVP_MD_CTX **hash, const EVP_MD *md)
 {
         ssl_clear_hash_ctx(hash);
         *hash = EVP_MD_CTX_create();
-        if (md)
+        if (*hash != NULL && md != NULL)
                 EVP_DigestInit_ex(*hash, md, NULL);
         return (*hash);
 }