Plug a "leak" in ssl_security_group()
authortb <tb@openbsd.org>
Thu, 9 May 2024 07:12:03 +0000 (07:12 +0000)
committertb <tb@openbsd.org>
Thu, 9 May 2024 07:12:03 +0000 (07:12 +0000)
commitbd6ff8689347f6820de92d9886bceca167a9d278
treef04ef7ad4af1d78d31877faf032952b4d88da064
parent0ef8c3974018adcb7246639513ff14e80149ab5d
Plug a "leak" in ssl_security_group()

The way the CBB API is used, CBB_add_u16() and CBB_finish() can't actually
fail here, but if they could, cbb->base would leak. Rewrite this code with
the proper idioms to make it look right.

ok jsing
lib/libssl/ssl_seclevel.c