Fix OpenSSL crash bug - "tls" pointer wasn't cleared after freeing it (Issue #409)

diff --git a/CHANGES.md b/CHANGES.md
index 8b78b003fa7483743ee7c4649b43667bce386eec..befbf3ab44f372f54887d24ecdb469483c6cad0b 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -6,6 +6,7 @@ Changes in CUPS v2.4.3 (TBA)
 
 - Added a title with device uri for found network printers (Issues #402, #393)
 - Fixed configuration on RISC-V machines (Issue #404)
+- Fixed an OpenSSL crash bug (Issue #409)
 
 
 Changes in CUPS v2.4.2 (26th May 2022)

diff --git a/cups/tls-openssl.c b/cups/tls-openssl.c
index c3e57742e82c7b09f86805181f882f7ecd171e19..6db9f8a9c2be28bfcf1f7827e78cb0489954736f 100644 (file)
--- a/cups/tls-openssl.c
+++ b/cups/tls-openssl.c
@@ -1152,6 +1152,8 @@ _httpTLSStop(http_t *http)                // I - Connection to server
   SSL_shutdown(http->tls);
   SSL_CTX_free(context);
   SSL_free(http->tls);
+
+  http->tls = NULL;
 }