diff --git a/ssl/d1_both.c b/ssl/d1_both.c
index 41ef5cb4f8af7e4f5282bf329cd93c208b5aef0f..877a2bfbc6fa69a7a3a7a82cc8b50604eb177487 100644
--- a/ssl/d1_both.c
+++ b/ssl/d1_both.c
@@ -1481,6 +1481,11 @@ dtls1_heartbeat(SSL *s)
 	 *  - Padding
 	 */
 	buf = OPENSSL_malloc(1 + 2 + payload + padding);
+	if (buf == NULL)
+		{
+		SSLerr(SSL_F_DTLS1_HEARTBEAT, ERR_R_MALLOC_FAILURE);
+		return -1;
+		}
 	p = buf;
 	/* Message Type */
 	*p++ = TLS1_HB_REQUEST;