Apparently s->ctx could be NULL at this point (see earlier

test). (Coverity ID 148).

ssl/t1_lib.c

@@ -1372,7 +1372,7 @@ int ssl_check_serverhello_tlsext(SSL *s)
  	 * tell the callback
  	 */
 	if ((s->tlsext_status_type != -1) && !(s->tlsext_status_expected)
-			&& s->ctx->tlsext_status_cb)
+			&& s->ctx && s->ctx->tlsext_status_cb)
 		{
 		int r;
 		/* Set resp to NULL, resplen to -1 so callback knows