Forgot to save the new cookie pointer...

Author: michaelrsweet

CHANGES.md

@@ -6,7 +6,8 @@ libcups v3.0.0 (YYYY-MM-DD)
 
 - Added `cupsOAuthGetJWKS` API.
 - Added `httpGetCookieValue` and `httpGetSecurity` APIs.
-- Updated `httpSetCookie` API to support multiple "Set-Cookie:" header values.
+- Updated the `httpSetCookie` API to support multiple "Set-Cookie:" header
+  values.
 - Updated `ippfind` to use `cupsGetClock` API.
 - Fixed return values of `ippDateToTime` when the timezone isn't GMT.
 - Fixed a potential timing issue with `cupsEnumDests`.

cups/http.c

@@ -225,11 +225,8 @@ httpClearCookie(http_t *http)		// I - HTTP connection
   if (!http)
     return;
 
-  if (http->cookie)
-  {
-    free(http->cookie);
-    http->cookie = NULL;
-  }
+  free(http->cookie);
+  http->cookie = NULL;
 }
 
 
@@ -2237,7 +2234,8 @@ httpSetCookie(http_t     *http,		// I - Connection
     if ((temp = realloc(http->cookie, ctotal)) == NULL)
       return;
 
-    temp[clen] = '\n';
+    http->cookie = temp;
+    temp[clen]   = '\n';
     cupsCopyString(temp + clen + 1, cookie, ctotal - clen - 1);
   }
   else
@@ -3092,7 +3090,7 @@ httpWriteResponse(http_t        *http,	// I - HTTP connection
 	    return (false);
 	  }
 	}
-	else if (httpPrintf(http, "Set-Cookie: %s; path=/; httponly;%s\r\n", http->cookie, http->tls ? " secure;" : "") < 1)
+	else if (httpPrintf(http, "Set-Cookie: %s; path=/; httponly;%s\r\n", start, http->tls ? " secure;" : "") < 1)
 	{
 	  http->status = HTTP_STATUS_ERROR;
 	  if (ptr)