check_cert_crl(): Avoid potential UAF when using the value of current_crl

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
MergeDate: Tue Feb  3 08:50:53 2026
(Merged from https://github.com/openssl/openssl/pull/29679)

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index 4b4a319d2e8af68aba3feaa8ec78ab587cc6579f..827a7663aace878c3732e8c14d02a5ee7e069c1c 100644 (file)
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -1392,6 +1392,7 @@ static int check_cert_crl(X509_STORE_CTX *ctx)
                 goto done;
         }
 
+        ctx->current_crl = NULL;
         X509_CRL_free(crl);
         X509_CRL_free(dcrl);
         crl = NULL;