generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add a check for a failed malloc

Browse Source 
Ensure we check for a NULL return from OPENSSL_malloc

Issue reported by Guido Vranken.

Reviewed-by: Richard Levitte <levitte@openssl.org>
This commit is contained in:
Matt Caswell 2016-03-15 11:51:48 +00:00
parent 3b93479fcf
commit 04d5242c46
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ssl/d1_both.c
View File

@ -1459,6 +1459,8 @@ int dtls1_process_heartbeat(SSL *s)
* plus 2 bytes payload length, plus payload, plus padding * plus 2 bytes payload length, plus payload, plus padding
*/ */
buffer = OPENSSL_malloc(write_length); buffer = OPENSSL_malloc(write_length);
if (buffer == NULL)
return -1;
bp = buffer; bp = buffer;
/* Enter response type, length and copy payload */ /* Enter response type, length and copy payload */

2
ssl/t1_lib.c
View File

@ -3858,6 +3858,8 @@ int tls1_process_heartbeat(SSL *s)
* plus 2 bytes payload length, plus payload, plus padding * plus 2 bytes payload length, plus payload, plus padding
*/ */
buffer = OPENSSL_malloc(1 + 2 + payload + padding); buffer = OPENSSL_malloc(1 + 2 + payload + padding);
if (buffer == NULL)
return -1;
bp = buffer; bp = buffer;
/* Enter response type, length and copy payload */ /* Enter response type, length and copy payload */