[openssl-commits] [openssl] OpenSSL_1_0_2-stable update

Matt Caswell matt at openssl.org
Mon May 11 11:23:20 UTC 2015


The branch OpenSSL_1_0_2-stable has been updated
       via  833518cf0e1e5224383a45cc68c8bb9c3a60865c (commit)
      from  8a73e3a0e8ba5360c6e2e4296f0d1bb2ff201038 (commit)


- Log -----------------------------------------------------------------
commit 833518cf0e1e5224383a45cc68c8bb9c3a60865c
Author: Kurt Cancemi <kurt at x64architecture.com>
Date:   Thu May 7 16:12:33 2015 -0400

    Add missing NULL check in X509V3_parse_list()
    
    Matt's note: I added a call to X509V3err to Kurt's original patch.
    
    RT#3840
    
    Signed-off-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (cherry picked from commit 344c271eb339fc2982e9a3584a94e51112d84584)

-----------------------------------------------------------------------

Summary of changes:
 crypto/x509v3/v3_utl.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/crypto/x509v3/v3_utl.c b/crypto/x509v3/v3_utl.c
index e73a7a9..bdd7b95 100644
--- a/crypto/x509v3/v3_utl.c
+++ b/crypto/x509v3/v3_utl.c
@@ -285,6 +285,10 @@ STACK_OF(CONF_VALUE) *X509V3_parse_list(const char *line)
     int state;
     /* We are going to modify the line so copy it first */
     linebuf = BUF_strdup(line);
+    if (linebuf == NULL) {
+        X509V3err(X509V3_F_X509V3_PARSE_LIST, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
     state = HDR_NAME;
     ntmp = NULL;
     /* Go through all characters */


More information about the openssl-commits mailing list