generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Avoid double-free in calleres to OCSP_parse_url

Browse Source 
set pointers to NULL after OPENSSL_free before returning to caller to
avoid possible double-free in caller

Signed-off-by: Rich Salz <rsalz@akamai.com>
Reviewed-by: Richard Levitte <levitte@openssl.org>
This commit is contained in:
Jim Basney
2016-03-09 17:11:49 -06:00
committed by Rich Salz
parent 642565106e
commit dca7158c95
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
crypto/ocsp/ocsp_lib.c
View File

@@ -266,8 +266,11 @@ int OCSP_parse_url(const char *url, char **phost, char **pport, char **ppath,
err: err:
OPENSSL_free(buf); OPENSSL_free(buf);
OPENSSL_free(*ppath); OPENSSL_free(*ppath);
*ppath = NULL;
OPENSSL_free(*pport); OPENSSL_free(*pport);
*pport = NULL;
OPENSSL_free(*phost); OPENSSL_free(*phost);
*phost = NULL;
return 0; return 0;
} }