Commit 74d67625 authored by Rich Salz's avatar Rich Salz
Browse files

GH837: Avoid double-free in OCSP parse. 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarDr. Stephen Henson <steve@openssl.org>
parent 2f460e1a

crypto/ocsp/ocsp_lib.c

+9 −3
Original line number Diff line number Diff line
@@ -271,12 +271,18 @@ int OCSP_parse_url(const char *url, char **phost, char **pport, char **ppath, 
 err:

    if (buf)

        OPENSSL_free(buf);

    if (*ppath)

    if (*ppath) {

        OPENSSL_free(*ppath);

    if (*pport)

        *ppath = NULL;

    }

    if (*pport) {

        OPENSSL_free(*pport);

    if (*phost)

        *pport = NULL;

    }

    if (*phost) {

        OPENSSL_free(*phost);

        *phost = NULL;

    }

    return 0;



}