From: Daniel Stenberg <daniel@haxx.se>
Date: Tue, 18 Oct 2016 11:05:43 +0000 (+0200)
Subject: Curl_polarsslthreadlock_thread_setup: clear array at init
X-Git-Tag: curl-7_51_0~84
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ace237ae4ee4a6399f2ab835aea937e6d4471d69;p=thirdparty%2Fcurl.git

Curl_polarsslthreadlock_thread_setup: clear array at init

... since if it fails to init the entire array and then tries to clean
it up, it would attempt to work on an uninitialized pointer.
---

diff --git a/lib/vtls/polarssl_threadlock.c b/lib/vtls/polarssl_threadlock.c
index 3b0ebf8866..b1eb7b746a 100644
--- a/lib/vtls/polarssl_threadlock.c
+++ b/lib/vtls/polarssl_threadlock.c
@@ -5,7 +5,7 @@
  *                            | (__| |_| |  _ <| |___
  *                             \___|\___/|_| \_\_____|
  *
- * Copyright (C) 2013-2015, Daniel Stenberg, <daniel@haxx.se>, et al.
+ * Copyright (C) 2013-2016, Daniel Stenberg, <daniel@haxx.se>, et al.
  * Copyright (C) 2010, 2011, Hoi-Ho Chan, <hoiho.chan@gmail.com>
  *
  * This software is licensed as described in the file COPYING, which
@@ -52,7 +52,7 @@ int Curl_polarsslthreadlock_thread_setup(void)
   int i;
   int ret;
 
-  mutex_buf = malloc(NUMT * sizeof(POLARSSL_MUTEX_T));
+  mutex_buf = calloc(NUMT * sizeof(POLARSSL_MUTEX_T), 1);
   if(!mutex_buf)
     return 0;     /* error, no number of threads defined */