[openssl-commits] [openssl] OpenSSL_1_1_1-stable update

[Matt Caswell]

The branch OpenSSL_1_1_1-stable has been updated
       via  faafe140a856ecbe743a0533a2d7117ece040f29 (commit)
      from  3b16099e0c8df1fd5094ad4490d87ab31516bf25 (commit)


- Log -----------------------------------------------------------------
commit faafe140a856ecbe743a0533a2d7117ece040f29
Author: Mansour Ahmadi <m.ahmadi at northeastern.edu>
Date:   Tue Dec 11 16:18:21 2018 -0500

    Add missing OPENSSL_clear_free before using ec->key
    
    Fixes #7657
    
    Reviewed-by: Nicola Tuveri <nic.tuv at gmail.com>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/7877)
    
    (cherry picked from commit 4128136a28c3b7d3878daed728c49f18eb950adc)

-----------------------------------------------------------------------

Summary of changes:
 crypto/cms/cms_pwri.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/crypto/cms/cms_pwri.c b/crypto/cms/cms_pwri.c
index eac9c2f..26e3bdc 100644
--- a/crypto/cms/cms_pwri.c
+++ b/crypto/cms/cms_pwri.c
@@ -373,6 +373,7 @@ int cms_RecipientInfo_pwri_crypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri,
             goto err;
         }
 
+        OPENSSL_clear_free(ec->key, ec->keylen);
         ec->key = key;
         ec->keylen = keylen;