From c0c1c7351e3cd21b8c8e97b0c253e1228b429ad3 Mon Sep 17 00:00:00 2001
From: tb <>
Date: Sun, 13 Mar 2022 16:25:58 +0000
Subject: Add missing error check after strdup()

From Alex Wilson

ok jsing
---
 src/lib/libcrypto/x509/x509_constraints.c | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

(limited to 'src/lib')

diff --git a/src/lib/libcrypto/x509/x509_constraints.c b/src/lib/libcrypto/x509/x509_constraints.c
index c7adaa4b36..6cea794560 100644
--- a/src/lib/libcrypto/x509/x509_constraints.c
+++ b/src/lib/libcrypto/x509/x509_constraints.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_constraints.c,v 1.21 2022/03/03 11:29:05 tb Exp $ */
+/* $OpenBSD: x509_constraints.c,v 1.22 2022/03/13 16:25:58 tb Exp $ */
 /*
  * Copyright (c) 2020 Bob Beck <beck@openbsd.org>
  *
@@ -949,7 +949,10 @@ x509_constraints_validate(GENERAL_NAME *constraint,
 	case GEN_URI:
 		if (!x509_constraints_valid_domain_constraint(bytes, len))
 			goto err;
-		name->name = strdup(bytes);
+		if ((name->name = strdup(bytes)) == NULL) {
+			*error = X509_V_ERR_OUT_OF_MEM;
+			return 0;
+		}
 		name->type = GEN_URI;
 		break;
 	default:
-- 
cgit v1.2.3-55-g6feb