From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 10 Nov 2025 07:11:30 +0000 (+0100)
Subject: rtmp: fix double-free on URL parse errors
X-Git-Tag: rc-8_18_0-1~381
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=00872d5c98bf977eff7d4276eb7379c2b3a7eed6;p=thirdparty%2Fcurl.git

rtmp: fix double-free on URL parse errors

Reported-by: Stanislav Fort (Aisle Research)
Closes #19438
---

diff --git a/lib/curl_rtmp.c b/lib/curl_rtmp.c
index 779422c9ae..4a5e5cb637 100644
--- a/lib/curl_rtmp.c
+++ b/lib/curl_rtmp.c
@@ -240,10 +240,9 @@ static CURLcode rtmp_setup_connection(struct Curl_easy *data,
 
   RTMP_Init(r);
   RTMP_SetBufferMS(r, DEF_BUFTIME);
-  if(!RTMP_SetupURL(r, data->state.url)) {
-    RTMP_Free(r);
+  if(!RTMP_SetupURL(r, data->state.url))
+    /* rtmp_conn_dtor() performs the cleanup */
     return CURLE_URL_MALFORMAT;
-  }
   return CURLE_OK;
 }