From 1b2988bc42c336623c14ab7aac9368c55df6e9d8 Mon Sep 17 00:00:00 2001
From: William Lallemand <wlallemand@haproxy.com>
Date: Fri, 10 Apr 2020 17:20:45 +0200
Subject: [PATCH] MINOR: ssl: don't alloc ssl_conf if no option found

When no SSL options were found between brackets, the structure ssl_conf
was still allocated for nothing.
---
 src/ssl_sock.c | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 1cd701e613..376e624115 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -4784,11 +4784,13 @@ static int crtlist_parse_line(char *line, char **crt_path, struct crtlist_entry
 
 	*crt_path = args[0];
 
-	ssl_conf = calloc(1, sizeof *ssl_conf);
-	if (!ssl_conf) {
-		memprintf(err, "not enough memory!");
-		cfgerr |= ERR_ALERT | ERR_FATAL;
-		goto error;
+	if (ssl_b) {
+		ssl_conf = calloc(1, sizeof *ssl_conf);
+		if (!ssl_conf) {
+			memprintf(err, "not enough memory!");
+			cfgerr |= ERR_ALERT | ERR_FATAL;
+			goto error;
+		}
 	}
 	cur_arg = ssl_b ? ssl_b : 1;
 	while (cur_arg < ssl_e) {