[openssl-commits] [openssl] master update

Rich Salz rsalz at openssl.org
Tue Jun 23 12:12:23 UTC 2015


The branch master has been updated
       via  4b8d8e2ad30e773e2229775ab0b8c35deb5e7c1c (commit)
      from  2d540402aac7a05af9c99b58864d53c0201a0b42 (commit)


- Log -----------------------------------------------------------------
commit 4b8d8e2ad30e773e2229775ab0b8c35deb5e7c1c
Author: Rich Salz <rsalz at akamai.com>
Date:   Sat Jun 13 09:29:10 2015 -0400

    RT3682: Avoid double-free on OCSP parse error
    
    Found by Kurt Cancemi.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>

-----------------------------------------------------------------------

Summary of changes:
 apps/ocsp.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apps/ocsp.c b/apps/ocsp.c
index 5d3e646..b6397b8 100644
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -275,6 +275,7 @@ int ocsp_main(int argc, char **argv)
             OPENSSL_free(thost);
             OPENSSL_free(tport);
             OPENSSL_free(tpath);
+            thost = tport = tpath = NULL;
             if (!OCSP_parse_url(opt_arg(), &host, &port, &path, &use_ssl)) {
                 BIO_printf(bio_err, "%s Error parsing URL\n", prog);
                 goto end;


More information about the openssl-commits mailing list