Segmentation fault possible in md_acme_order.c:check_challenges()

[bitscher]

In function

mod_md/src/md_acme_order.c

Line 497 in 1e105f8

static apr_status_t check_challenges(void *baton, int attempt)

Call to md_acme_authz_retrieve() can fail and authz will be set to NULL.
Dereferencing it in the error handling will result in a segmentation fault.

mod_md/src/md_acme_order.c

Lines 510 to 511 in 1e105f8

	rv = md_acme_authz_retrieve(ctx->acme, ctx->p, url, &authz);
	if (APR_SUCCESS == rv) {

mod_md/src/md_acme_order.c

Lines 538 to 542 in 1e105f8

	}
	else {
	md_result_printf(ctx->result, rv, "authorization retrieval failed for domain %s",
	authz->domain);
	}

[icing]

Thanks for the report! This indeed looks wrong. Please see #325 for a fix.

[icing]

release in v2.4.25