diff --git a/lib/hx509/revoke.c b/lib/hx509/revoke.c
index 5d4042c7e..0f0018d77 100644
--- a/lib/hx509/revoke.c
+++ b/lib/hx509/revoke.c
@@ -1077,6 +1077,7 @@ hx509_crl_alloc(hx509_context context, hx509_crl *crl)
     if (ret) {
 	free(*crl);
 	*crl = NULL;
+	return ret;
     }
     (*crl)->expire = 0;
     return ret;