Commit 9052ffda authored by Jonas Maebe's avatar Jonas Maebe Committed by Kurt Roeckx
Browse files

ssl3_get_certificate_request: check for NULL after allocating s->cert->ctypes 



Signed-off-by: default avatarKurt Roeckx <kurt@roeckx.be>
Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent d00b1d62

ssl/s3_clnt.c

+5 −0
Original line number Diff line number Diff line
@@ -2145,6 +2145,11 @@ int ssl3_get_certificate_request(SSL *s) 
		{

		/* If we exceed static buffer copy all to cert structure */

		s->cert->ctypes = OPENSSL_malloc(ctype_num);

		if (s->cert->ctypes == NULL)

			{

			SSLerr(SSL_F_SSL3_GET_CERTIFICATE_REQUEST,ERR_R_MALLOC_FAILURE);

			goto err;

			}

		memcpy(s->cert->ctypes, p, ctype_num);

		s->cert->ctype_num = (size_t)ctype_num;

		ctype_num=SSL3_CT_NUMBER;