summaryrefslogtreecommitdiff
path: root/src/lib/libc/stdlib
diff options
context:
space:
mode:
authordoug <>2015-02-07 04:37:35 +0000
committerdoug <>2015-02-07 04:37:35 +0000
commit34580c70507efc9093560bfbcf1ddd9260243446 (patch)
tree63acbaab02583769dc6109cb71eefe4e5bb8e7c8 /src/lib/libc/stdlib
parente7d2eaafd57f353d8d6754ac5f5253f1eada3342 (diff)
downloadopenbsd-34580c70507efc9093560bfbcf1ddd9260243446.tar.gz
openbsd-34580c70507efc9093560bfbcf1ddd9260243446.tar.bz2
openbsd-34580c70507efc9093560bfbcf1ddd9260243446.zip
Only call free in CBB_init().
CBB_init_fixed() should not call free because it can lead to use after free or double free bugs. The caller should be responsible for creating and destroying the buffer. From BoringSSL commit a84f06fc1eee6ea25ce040675fbad72c532afece miod agrees with the reasoning ok jsing@, beck@
Diffstat (limited to 'src/lib/libc/stdlib')
0 files changed, 0 insertions, 0 deletions