[openssl/openssl] c24cb3: Fix a possible use after free in X509v3_asid_add_i...

Bernd Edlinger noreply at github.com
Fri Dec 1 10:06:09 UTC 2023


  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: c24cb3f5bcec41284419812272dd6be2a0294683
      https://github.com/openssl/openssl/commit/c24cb3f5bcec41284419812272dd6be2a0294683
  Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
  Date:   2023-12-01 (Fri, 01 Dec 2023)

  Changed paths:
    M crypto/x509/v3_asid.c

  Log Message:
  -----------
  Fix a possible use after free in X509v3_asid_add_id_or_range

And clean up partially created choice objects, which have
still the default type = -1 from ASIdentifierChoice_new().

Fixes #22700

Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22745)

(cherry picked from commit 49e9436af3d85963fd6156b7d6f33e0734bf5ba9)




More information about the openssl-commits mailing list