Git 2.18.4v2.18.4

This merges up the security fix from v2.17.5.

Signed-off-by: Jonathan Nieder <jrnieder@gmail.com>

1 files changed, 1 insertions, 0 deletions

diff --git a/http.c b/http.c
index b4bfbceaeb..3fdc7a7328 100644
--- a/http.c
+++ b/http.c
@@ -528,6 +528,7 @@ static int has_cert_password(void)
 		return 0;
 	if (!cert_auth.password) {
 		cert_auth.protocol = xstrdup("cert");
+		cert_auth.host = xstrdup("");
 		cert_auth.username = xstrdup("");
 		cert_auth.path = xstrdup(ssl_cert);
 		credential_fill(&cert_auth);