From: Daniel Stenberg <daniel@haxx.se>
Date: Wed, 11 Jun 2025 07:33:04 +0000 (+0200)
Subject: http_ntlm: protect against null deref
X-Git-Tag: curl-8_15_0~287
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=55865207457ba860956aea7a31a3774a55397817;p=thirdparty%2Fcurl.git

http_ntlm: protect against null deref

Closes #17585
---

diff --git a/lib/http_ntlm.c b/lib/http_ntlm.c
index 6d1672bc63..8c2ff40480 100644
--- a/lib/http_ntlm.c
+++ b/lib/http_ntlm.c
@@ -168,6 +168,8 @@ CURLcode Curl_output_ntlm(struct Curl_easy *data, bool proxy)
     authp = &data->state.authhost;
   }
   ntlm = Curl_auth_ntlm_get(conn, proxy);
+  if(!ntlm)
+    return CURLE_OUT_OF_MEMORY;
   authp->done = FALSE;
 
   /* not set means empty */