diff options
| author | doug <> | 2015-02-07 04:37:35 +0000 |
|---|---|---|
| committer | doug <> | 2015-02-07 04:37:35 +0000 |
| commit | 6b246d35bb311ef0726da2113541c9a56921791f (patch) | |
| tree | 63acbaab02583769dc6109cb71eefe4e5bb8e7c8 /src/lib/libssl/s3_clnt.c | |
| parent | be7bacd2cbd3fc2572c636ac04282b2ca64f7272 (diff) | |
| download | openbsd-6b246d35bb311ef0726da2113541c9a56921791f.tar.gz openbsd-6b246d35bb311ef0726da2113541c9a56921791f.tar.bz2 openbsd-6b246d35bb311ef0726da2113541c9a56921791f.zip | |
Only call free in CBB_init().
CBB_init_fixed() should not call free because it can lead to use after
free or double free bugs. The caller should be responsible for
creating and destroying the buffer.
From BoringSSL commit a84f06fc1eee6ea25ce040675fbad72c532afece
miod agrees with the reasoning
ok jsing@, beck@
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions