- Andre Guibert de Bruet fixed a second case of not checking the malloc()

  return code in the Negotiate code.

1 files changed, 3 insertions, 1 deletions

diff --git a/lib/http_negotiate.c b/lib/http_negotiate.c
index ac8ad5802..e7f934824 100644
--- a/lib/http_negotiate.c
+++ b/lib/http_negotiate.c
@@ -211,8 +211,10 @@ int Curl_input_negotiate(struct connectdata *conn, bool proxy,
         }
         else {
           free(input_token.value);
-          input_token.value = NULL;
           input_token.value = malloc(mechTokenLength);
+          if (input_token.value == NULL)
+            return CURLE_OUT_OF_MEMORY;
+
           memcpy(input_token.value, mechToken,mechTokenLength);
           input_token.length = mechTokenLength;
           free(mechToken);