allocation may fail. CID #1643157

diff --git a/src/protocols/der/decode.c b/src/protocols/der/decode.c
index 35c86444877784dc9cba31cf2a6500f0c7db3aa5..c14273ac5267fc2e5f42186cb0f6f309206552d4 100644 (file)
--- a/src/protocols/der/decode.c
+++ b/src/protocols/der/decode.c
@@ -926,7 +926,10 @@ static ssize_t fr_der_decode_sequence(TALLOC_CTX *ctx, fr_pair_list_t *out, fr_d
                         */
                        if (unlikely(flags->sequence_of == FR_DER_TAG_CHOICE)) {
                                child = fr_dict_attr_child_by_num(parent, current_tag);
-                               if (!child) child = fr_dict_attr_unknown_raw_afrom_num(decode_ctx->tmp_ctx, parent, current_tag);
+                               if (!child) {
+                                       child = fr_dict_attr_unknown_raw_afrom_num(decode_ctx->tmp_ctx, parent, current_tag);
+                                       if (!child) return -1;
+                               }
                        }
 
                        FR_PROTO_TRACE("decode context %s -> %s", parent->name, child->name);