summaryrefslogtreecommitdiff
path: root/src/lib/libc/stdlib/abs.3
diff options
context:
space:
mode:
authortb <>2023-03-11 15:50:13 +0000
committertb <>2023-03-11 15:50:13 +0000
commit33942a676ff7c43cef9927e118be7372ff5a588d (patch)
treecaf652d414bbecd178c600173b9af8bb1d4f71fa /src/lib/libc/stdlib/abs.3
parent41f7f65096b8335fece23db719c013b6f69b9f15 (diff)
downloadopenbsd-33942a676ff7c43cef9927e118be7372ff5a588d.tar.gz
openbsd-33942a676ff7c43cef9927e118be7372ff5a588d.tar.bz2
openbsd-33942a676ff7c43cef9927e118be7372ff5a588d.zip
Fix double free after BIO_new_NDEF()
Once the asn_bio is prepended to the out chain, and before the asn1_cb() has done its thing, asn_bio needs to be popped off again on error. Failing to do this can cause write after frees or double frees when the out BIO is used after the function returned. Based on a very complicated diff by Matt Caswell and Viktor Dukhovni. This was part of the fixes in OpenSSL 1.1.1t. ok jsing
Diffstat (limited to 'src/lib/libc/stdlib/abs.3')
0 files changed, 0 insertions, 0 deletions