Morgan Adamiec authored Jan 23, 2020 and Allan McRae committed Jan 28, 2020

It looks like this function has never actually worked. The current list
is never set to NULL after being freed. So the new deps were just
appended to the already freed list, leading to a segfault.

Signed-off-by: Allan McRae <allan@archlinux.org>