http_ntlm: protect against null deref

Closes #17585

diff --git a/lib/http_ntlm.c b/lib/http_ntlm.c
index 6d1672bc633fafb35b88cc832db970d7f4ef4586..8c2ff40480103db977dd820f8b1a61c0bf67aa35 100644 (file)
--- a/lib/http_ntlm.c
+++ b/lib/http_ntlm.c
@@ -168,6 +168,8 @@ CURLcode Curl_output_ntlm(struct Curl_easy *data, bool proxy)
     authp = &data->state.authhost;
   }
   ntlm = Curl_auth_ntlm_get(conn, proxy);
+  if(!ntlm)
+    return CURLE_OUT_OF_MEMORY;
   authp->done = FALSE;
 
   /* not set means empty */