* Fix a couple potential frees of invalid pointers.

log.c

@@ -135,7 +135,11 @@ log_err(int level, enum _log_facility facility, char *fname, int lineno, char *f
 	// user log
 	va_start(ap, fmt);
 	//vsnprintf(errbuf, sizeof(errbuf), fmt, ap);
-	vasprintf(&errbuf, fmt, ap);
+	if (vasprintf(&errbuf, fmt, ap) == -1)
+	{
+		va_end(ap);
+		return;
+	}
 	va_end(ap);
 
 	// timestamp

upnphttp.c

@@ -565,7 +565,7 @@ Send501(struct upnphttp * h)
 static const char *
 findendheaders(const char * s, int len)
 {
-	while(len-->0)
+	while(len-- > 0)
 	{
 		if(s[0]=='\r' && s[1]=='\n' && s[2]=='\r' && s[3]=='\n')
 			return s;
@@ -585,13 +585,9 @@ sendXMLdesc(struct upnphttp * h, char * (f)(int *))
 	{
 		DPRINTF(E_ERROR, L_HTTP, "Failed to generate XML description\n");
 		Send500(h);
-		free(desc);
 		return;
 	}
-	else
-	{
-		BuildResp_upnphttp(h, desc, len);
-	}
+	BuildResp_upnphttp(h, desc, len);
 	SendResp_upnphttp(h);
 	CloseSocket_upnphttp(h);
 	free(desc);