Commit a98810bf authored by FdaSilvaYY's avatar FdaSilvaYY Committed by Matt Caswell
Browse files

Fix some malloc failure crashes on X509_STORE_CTX_set_ex_data 



from BoringSSL 306ece31bcaaed49e0240a2e5555f8901ebb2d45

Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent 11ed851d

ssl/ssl_cert.c

+3 −1
Original line number Diff line number Diff line
@@ -409,7 +409,9 @@ int ssl_verify_cert_chain(SSL *s, STACK_OF(X509) *sk) 


    /* Set suite B flags if needed */

    X509_STORE_CTX_set_flags(ctx, tls1_suiteb(s));

    X509_STORE_CTX_set_ex_data(ctx, SSL_get_ex_data_X509_STORE_CTX_idx(), s);

    if (!X509_STORE_CTX_set_ex_data(ctx, SSL_get_ex_data_X509_STORE_CTX_idx(), s)) {

        goto end;

    }



    /* Verify via DANE if enabled */

    if (DANETLS_ENABLED(&s->dane))