avoid possible NULL dereference caused by my previous fix
authorDaniel Stenberg <daniel@haxx.se>
Mon, 3 Aug 2009 14:07:57 +0000 (14:07 +0000)
committerDaniel Stenberg <daniel@haxx.se>
Mon, 3 Aug 2009 14:07:57 +0000 (14:07 +0000)
lib/ssluse.c

index 0b98ba0..07824b4 100644 (file)
@@ -1178,7 +1178,7 @@ static CURLcode verifyhost(struct connectdata *conn,
         else /* not a UTF8 name */
           j = ASN1_STRING_to_UTF8(&peer_CN, tmp);
 
-        if((int)strlen((char *)peer_CN) != j) {
+        if(peer_CN && ((int)strlen((char *)peer_CN) != j)) {
           /* there was a terminating zero before the end of string, this
              cannot match and we return failure! */
           failf(data, "SSL: illegal cert name field");