Add missing error check after strdup()

From Alex Wilson

ok jsing

1 files changed, 5 insertions, 2 deletions

diff --git a/src/lib/libcrypto/x509/x509_constraints.c b/src/lib/libcrypto/x509/x509_constraints.c
index c7adaa4b36..6cea794560 100644
--- a/src/lib/libcrypto/x509/x509_constraints.c
+++ b/src/lib/libcrypto/x509/x509_constraints.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_constraints.c,v 1.21 2022/03/03 11:29:05 tb Exp $ */
+/* $OpenBSD: x509_constraints.c,v 1.22 2022/03/13 16:25:58 tb Exp $ */
 /*
  * Copyright (c) 2020 Bob Beck <beck@openbsd.org>
  *
@@ -949,7 +949,10 @@ x509_constraints_validate(GENERAL_NAME *constraint,
         case GEN_URI:
                 if (!x509_constraints_valid_domain_constraint(bytes, len))
                         goto err;
-                name->name = strdup(bytes);
+                if ((name->name = strdup(bytes)) == NULL) {
+                        *error = X509_V_ERR_OUT_OF_MEM;
+                        return 0;
+                }
                 name->type = GEN_URI;
                 break;
         default: