From 4ac19c064fb382b40cca8ef6c49cc845eb92cdf6 Mon Sep 17 00:00:00 2001 From: otto <> Date: Sun, 16 Apr 2017 06:26:55 +0000 Subject: backout previous, data_len is not always initialized --- src/lib/libssl/ssl_asn1.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'src/lib') diff --git a/src/lib/libssl/ssl_asn1.c b/src/lib/libssl/ssl_asn1.c index 8e6528d153..b27be00abe 100644 --- a/src/lib/libssl/ssl_asn1.c +++ b/src/lib/libssl/ssl_asn1.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_asn1.c,v 1.52 2017/04/14 15:20:16 jsing Exp $ */ +/* $OpenBSD: ssl_asn1.c,v 1.53 2017/04/16 06:26:55 otto Exp $ */ /* * Copyright (c) 2016 Joel Sing @@ -205,9 +205,12 @@ i2d_SSL_SESSION(SSL_SESSION *s, unsigned char **pp) rv = (int)data_len; err: + if (data != NULL) + explicit_bzero(data, data_len); + CBB_cleanup(&session); - freezero(data, data_len); free(peer_cert_bytes); + free(data); return rv; } -- cgit v1.2.3-55-g6feb