Don't follow the NULL pointer.

In practice, sendrq() is called from two functions, radsrv() and
clientwr(), none of which should be able to pass rq->to == NULL.

1 files changed, 2 insertions, 1 deletions

diff --git a/radsecproxy.c b/radsecproxy.c
index e15ac9c..a6f71c4 100644
--- a/radsecproxy.c
+++ b/radsecproxy.c
@@ -507,7 +507,8 @@ errexit:
     if (rq->from)
 	rmclientrq(rq, rq->msg->id);
     freerq(rq);
-    pthread_mutex_unlock(&to->newrq_mutex);
+    if (to)
+        pthread_mutex_unlock(&to->newrq_mutex);
     removeclientrqs_sendrq_freeserver_lock(0);
 }