Commit da8f1088 authored by mancha's avatar mancha Committed by Ben Laurie
Browse files

Fix double frees. 

Conflicts:
	CHANGES
parent ebbbc8bd

CHANGES

+3 −0
Original line number Diff line number Diff line
@@ -4,6 +4,9 @@ 


 Changes between 1.0.0l and 1.0.0m [xx XXX xxxx]



  *) Fix some double frees. These are not thought to be exploitable.

     [mancha <mancha1@zoho.com>]



  *) Fix for the attack described in the paper "Recovering OpenSSL

     ECDSA Nonces Using the FLUSH+RELOAD Cache Side-channel Attack"

     by Yuval Yarom and Naomi Benger. Details can be obtained from:

crypto/pkcs7/pk7_doit.c

+1 −0
Original line number Diff line number Diff line
@@ -922,6 +922,7 @@ int PKCS7_SIGNER_INFO_sign(PKCS7_SIGNER_INFO *si) 
	if (EVP_DigestSignUpdate(&mctx,abuf,alen) <= 0)

		goto err;

	OPENSSL_free(abuf);

	abuf = NULL;

	if (EVP_DigestSignFinal(&mctx, NULL, &siglen) <= 0)

		goto err;

	abuf = OPENSSL_malloc(siglen);

crypto/ts/ts_rsp_verify.c

+1 −0
Original line number Diff line number Diff line
@@ -626,6 +626,7 @@ static int TS_compute_imprint(BIO *data, TS_TST_INFO *tst_info, 
	X509_ALGOR_free(*md_alg);

	OPENSSL_free(*imprint);

	*imprint_len = 0;

	*imprint = NULL;

	return 0;

	}

ssl/d1_srvr.c

+1 −0
Original line number Diff line number Diff line
@@ -1197,6 +1197,7 @@ int dtls1_send_server_key_exchange(SSL *s) 
			    (unsigned char *)encodedPoint, 

			    encodedlen);

			OPENSSL_free(encodedPoint);

			encodedPoint = NULL;

			p += encodedlen;

			}

#endif