diff options
| author | tb <> | 2023-08-12 06:14:36 +0000 |
|---|---|---|
| committer | tb <> | 2023-08-12 06:14:36 +0000 |
| commit | 7dd9dcbc7a655f702d9a2f3f641a158d5f2d2566 (patch) | |
| tree | 8a0516229988a4b4d44324162099ad13ebef80fa /src/lib/libc | |
| parent | dc545d973cd674616909f2370a243a5ca42d85d1 (diff) | |
| download | openbsd-7dd9dcbc7a655f702d9a2f3f641a158d5f2d2566.tar.gz openbsd-7dd9dcbc7a655f702d9a2f3f641a158d5f2d2566.tar.bz2 openbsd-7dd9dcbc7a655f702d9a2f3f641a158d5f2d2566.zip | |
Convert {DH,DSA}_new_method() to using calloc()
Due to OPENSSL_NO_ENGINE the engine member of dh and dsa is currently
uninitialized. As a consequence, {DH,DSA}_get0_engine() will return a
garbage pointer, which is particularly bad because the only reason we
kept them in the first place is that they are used by some software...
A side effect of freeing with {DH,DSA}_free() instead of a hand-rolled
version is that we may call ->meth->finish() before ->meth->init() was
called. We need a NULL check for ->meth to be on the safe side in case
we should need to bring ENGINE back.
with nits from djm
ok deraadt djm
Diffstat (limited to 'src/lib/libc')
0 files changed, 0 insertions, 0 deletions