artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 76154e2) | patch
Prevent double free in int_TS_RESP_verify_token
authortb <tb@openbsd.org>
Sat, 1 May 2021 13:13:45 +0000 (13:13 +0000)
committertb <tb@openbsd.org>
Sat, 1 May 2021 13:13:45 +0000 (13:13 +0000)
commite81eb8669278e4a65ad2ec8e6c37fc13de1eb9b7
tree0bda4c64b9b3ab7bd14fd56d648b2c6206961c08tree | snapshot
parent76154e282cbf409aaa938ddefcaf904b5ab5d226commit | diff
Prevent double free in int_TS_RESP_verify_token

If TS_compute_imprint fails after md_alg was allocated, there will be a
double free in its caller. Obvious fix is to null out the output
parameter md_alg just like it's already done for imprint and imprint_len.

From Pauli Dale, OpenSSL 1.1.1, a3dea76f742896b7d75a0c0529c0af1e628bd853

ok inoguchi jsing
lib/libcrypto/ts/ts_rsp_verify.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim