diff -up mod_auth_openidc-2.4.10/src/mod_auth_openidc.c.orig mod_auth_openidc-2.4.10/src/mod_auth_openidc.c --- mod_auth_openidc-2.4.10/src/mod_auth_openidc.c.orig 2024-04-15 17:56:53.022820648 +0200 +++ mod_auth_openidc-2.4.10/src/mod_auth_openidc.c 2024-04-15 17:57:23.325867066 +0200 @@ -175,6 +175,8 @@ void oidc_strip_cookies(request_rec *r) do { while (cookie != NULL && *cookie == OIDC_CHAR_SPACE) cookie++; + if (cookie == NULL) + break; for (i = 0; i < strip->nelts; i++) { name = ((const char**) strip->elts)[i];