Commit 3dc87806 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Free buffer in a2i_ASN1_INTEGER() on error path. 



Thank to Shi Lei for reporting this bug.

Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
parent 684bc13e

crypto/asn1/f_int.c

+1 −0
Original line number Diff line number Diff line
@@ -112,6 +112,7 @@ int a2i_ASN1_INTEGER(BIO *bp, ASN1_INTEGER *bs, char *buf, int size) 
        i -= again;

        if (i % 2 != 0) {

            ASN1err(ASN1_F_A2I_ASN1_INTEGER, ASN1_R_ODD_NUMBER_OF_CHARS);

            OPENSSL_free(s);

            return 0;

        }

        i /= 2;