Commit 4ba5e63b authored by Ben Laurie's avatar Ben Laurie
Browse files

Fix double frees.

parent 9330a85e

CHANGES

+3 −0
Original line number Diff line number Diff line
@@ -4,6 +4,9 @@ 


 Changes between 1.0.2 and 1.1.0  [xx XXX xxxx]



  *) Fix some double frees. These are not thought to be exploitable.

     [mancha <mancha1@zoho.com>]



  *) A missing bounds check in the handling of the TLS heartbeat extension

     can be used to reveal up to 64k of memory to a connected client or

     server.

crypto/pkcs7/pk7_doit.c

+1 −0
Original line number Diff line number Diff line
@@ -928,6 +928,7 @@ int PKCS7_SIGNER_INFO_sign(PKCS7_SIGNER_INFO *si) 
	if (EVP_DigestSignUpdate(&mctx,abuf,alen) <= 0)

		goto err;

	OPENSSL_free(abuf);

	abuf = NULL;

	if (EVP_DigestSignFinal(&mctx, NULL, &siglen) <= 0)

		goto err;

	abuf = OPENSSL_malloc(siglen);

crypto/ts/ts_rsp_verify.c

+1 −0
Original line number Diff line number Diff line
@@ -629,6 +629,7 @@ static int TS_compute_imprint(BIO *data, TS_TST_INFO *tst_info, 
	X509_ALGOR_free(*md_alg);

	OPENSSL_free(*imprint);

	*imprint_len = 0;

	*imprint = 0;

	return 0;

	}