Make TS_compute_imprint a bit more robust.
authortb <tb@openbsd.org>
Sun, 2 May 2021 15:33:33 +0000 (15:33 +0000)
committertb <tb@openbsd.org>
Sun, 2 May 2021 15:33:33 +0000 (15:33 +0000)
commit04cba2782569480bf9984595088841a5df534b13
tree27b0339b58cefd8f155bcc30b32bafd372a43175
parent548f8d029907423b59d8be8f8531174b0da542f0
Make TS_compute_imprint a bit more robust.

Instead of using the output parameters directly, null them out at the
beginning and work with local variables which are only assigned to the
output parameters on success. This way we avoid leaking stale pointers
back to the caller.

requested/ok jsing
lib/libcrypto/ts/ts_rsp_verify.c