In dtls1_reassemble_fragment() and dtls1_process_out_of_seq_message(), in case
authormiod <miod@openbsd.org>
Sun, 18 May 2014 16:13:48 +0000 (16:13 +0000)
committermiod <miod@openbsd.org>
Sun, 18 May 2014 16:13:48 +0000 (16:13 +0000)
commit06f76ca70766285913f702c4abeb1c2ca4e061e8
tree2cc309777d367555b10e5d4bebc5ad5fb7927d31
parent4f7f7a3c899b86cd844c1f4d910f811567385252
In dtls1_reassemble_fragment() and dtls1_process_out_of_seq_message(), in case
of error, make sure we do not free pitem which is still linked into the
pqueue.
In the same vain, only free `frag' if we allocated it in this function.

Help and ok beck@
lib/libssl/d1_both.c
lib/libssl/src/ssl/d1_both.c