On: Null pointer dereference – new security bug for Op...

[codezero]

or

  if ((wb->buf == NULL) && !ssl3_setup_write_buffer(s)) {
     return -1;
  }