Fixed potential crasher in code signing in the case that the host app…

…lication is not code signed.

SUCodeSigningVerifier.m

@@ -26,10 +26,11 @@ + (BOOL)codeSignatureIsValidAtPath:(NSString *)destinationPath error:(NSError **
     // This API didn't exist prior to 10.6.
     if (SecCodeCopySelf == NULL) return NO;
 
-    SecRequirementRef requirement = NULL;
     OSStatus result;
-
+    SecRequirementRef requirement = NULL;
+    SecStaticCodeRef staticCode = NULL;
     SecCodeRef hostCode = NULL;
+
     result = SecCodeCopySelf(kSecCSDefaultFlags, &hostCode);
     if (result != 0) {
         SULog(@"Failed to copy host code %d", result);
@@ -42,7 +43,6 @@ + (BOOL)codeSignatureIsValidAtPath:(NSString *)destinationPath error:(NSError **
         goto finally;
     }
 
-    SecStaticCodeRef staticCode = NULL;
     NSBundle *newBundle = [NSBundle bundleWithPath:destinationPath];
     if (!newBundle) {
         SULog(@"Failed to load NSBundle for update");