diff -up openssl-1.0.2k/crypto/x509/x509_cmp.c.null-hash-deref openssl-1.0.2k/crypto/x509/x509_cmp.c
--- openssl-1.0.2k/crypto/x509/x509_cmp.c.null-hash-deref 2021-09-01 14:13:51.247986607 +0200
+++ openssl-1.0.2k/crypto/x509/x509_cmp.c 2021-09-01 14:15:13.542078900 +0200
@@ -88,6 +88,8 @@ unsigned long X509_issuer_and_serial_has
EVP_MD_CTX_init(&ctx;;
EVP_MD_CTX_set_flags(&ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
f = X509_NAME_oneline(a->cert_info->issuer, NULL, 0);
+ if (f == NULL)
+ goto err;
if (!EVP_DigestInit_ex(&ctx, EVP_md5(), NULL))
goto err;
if (!EVP_DigestUpdate(&ctx, (unsigned char *)f, strlen(f)))