generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix double frees.

Browse Source
This commit is contained in:
Ben Laurie 2014-04-22 12:38:26 +01:00
parent 9330a85e04
commit 4ba5e63bfd
3 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@ -4,6 +4,9 @@
Changes between 1.0.2 and 1.1.0 [xx XXX xxxx] Changes between 1.0.2 and 1.1.0 [xx XXX xxxx]
*) Fix some double frees. These are not thought to be exploitable.
[mancha <mancha1@zoho.com>]
*) A missing bounds check in the handling of the TLS heartbeat extension *) A missing bounds check in the handling of the TLS heartbeat extension
can be used to reveal up to 64k of memory to a connected client or can be used to reveal up to 64k of memory to a connected client or
server. server.

1
crypto/pkcs7/pk7_doit.c
View File

@ -928,6 +928,7 @@ int PKCS7_SIGNER_INFO_sign(PKCS7_SIGNER_INFO *si)
if (EVP_DigestSignUpdate(&mctx,abuf,alen) <= 0) if (EVP_DigestSignUpdate(&mctx,abuf,alen) <= 0)
goto err; goto err;
OPENSSL_free(abuf); OPENSSL_free(abuf);
abuf = NULL;
if (EVP_DigestSignFinal(&mctx, NULL, &siglen) <= 0) if (EVP_DigestSignFinal(&mctx, NULL, &siglen) <= 0)
goto err; goto err;
abuf = OPENSSL_malloc(siglen); abuf = OPENSSL_malloc(siglen);

1
crypto/ts/ts_rsp_verify.c
View File

@ -629,6 +629,7 @@ static int TS_compute_imprint(BIO *data, TS_TST_INFO *tst_info,
X509_ALGOR_free(*md_alg); X509_ALGOR_free(*md_alg);
OPENSSL_free(*imprint); OPENSSL_free(*imprint);
*imprint_len = 0; *imprint_len = 0;
*imprint = 0;
return 0; return 0;
} }