diff options
| author | tb <> | 2021-05-01 13:13:45 +0000 |
|---|---|---|
| committer | tb <> | 2021-05-01 13:13:45 +0000 |
| commit | 4070e35405faa122a43083b89e5569ecc3aaf536 (patch) | |
| tree | 3a4aa4d6f97d60ae302f624d12abae1559776335 /src/lib/libssl/ssl_both.c | |
| parent | 17bb84e0c57715e08a729de5661c946f0938d11c (diff) | |
| download | openbsd-4070e35405faa122a43083b89e5569ecc3aaf536.tar.gz openbsd-4070e35405faa122a43083b89e5569ecc3aaf536.tar.bz2 openbsd-4070e35405faa122a43083b89e5569ecc3aaf536.zip | |
Prevent double free in int_TS_RESP_verify_token
If TS_compute_imprint fails after md_alg was allocated, there will be a
double free in its caller. Obvious fix is to null out the output
parameter md_alg just like it's already done for imprint and imprint_len.
From Pauli Dale, OpenSSL 1.1.1, a3dea76f742896b7d75a0c0529c0af1e628bd853
ok inoguchi jsing
Diffstat (limited to 'src/lib/libssl/ssl_both.c')
0 files changed, 0 insertions, 0 deletions