From 55865207457ba860956aea7a31a3774a55397817 Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Wed, 11 Jun 2025 09:33:04 +0200
Subject: [PATCH] http_ntlm: protect against null deref

Closes #17585
---
 lib/http_ntlm.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/http_ntlm.c b/lib/http_ntlm.c
index 6d1672bc63..8c2ff40480 100644
--- a/lib/http_ntlm.c
+++ b/lib/http_ntlm.c
@@ -168,6 +168,8 @@ CURLcode Curl_output_ntlm(struct Curl_easy *data, bool proxy)
     authp = &data->state.authhost;
   }
   ntlm = Curl_auth_ntlm_get(conn, proxy);
+  if(!ntlm)
+    return CURLE_OUT_OF_MEMORY;
   authp->done = FALSE;
 
   /* not set means empty */