Commit dca7158c authored by Jim Basney's avatar Jim Basney Committed by Rich Salz
Browse files

Avoid double-free in calleres to OCSP_parse_url 



set pointers to NULL after OPENSSL_free before returning to caller to
avoid possible double-free in caller

Signed-off-by: default avatarRich Salz <rsalz@akamai.com>
Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
parent 64256510

crypto/ocsp/ocsp_lib.c

+3 −0
Original line number Diff line number Diff line
@@ -266,8 +266,11 @@ int OCSP_parse_url(const char *url, char **phost, char **pport, char **ppath, 
 err:

    OPENSSL_free(buf);

    OPENSSL_free(*ppath);

    *ppath = NULL;

    OPENSSL_free(*pport);

    *pport = NULL;

    OPENSSL_free(*phost);

    *phost = NULL;

    return 0;



}