[openssl] master update

Richard Levitte levitte at openssl.org
Tue May 26 05:57:50 UTC 2020


The branch master has been updated
       via  5606922c3d2e8c3d3ffda4347cb9fe3992d75f89 (commit)
      from  b8086652650c0782bc8d63b620663e04a3c6a3a7 (commit)


- Log -----------------------------------------------------------------
commit 5606922c3d2e8c3d3ffda4347cb9fe3992d75f89
Author: Richard Levitte <levitte at openssl.org>
Date:   Sat May 23 17:34:07 2020 +0200

    PROV: Fix RSA-OAEP memory leak
    
    The OAEP label wasn't freed when the operation context was freed.
    
    Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/11927)

-----------------------------------------------------------------------

Summary of changes:
 providers/implementations/asymciphers/rsa_enc.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/providers/implementations/asymciphers/rsa_enc.c b/providers/implementations/asymciphers/rsa_enc.c
index 405842e69e..1f9ded4a65 100644
--- a/providers/implementations/asymciphers/rsa_enc.c
+++ b/providers/implementations/asymciphers/rsa_enc.c
@@ -257,6 +257,7 @@ static void rsa_freectx(void *vprsactx)
 
     EVP_MD_free(prsactx->oaep_md);
     EVP_MD_free(prsactx->mgf1_md);
+    OPENSSL_free(prsactx->oaep_label);
 
     OPENSSL_free(prsactx);
 }


More information about the openssl-commits mailing list