[openssl-dev] Heap corruption in asn1_item_ex_combine_new()

Dr. Stephen Henson steve at openssl.org
Wed Apr 1 11:26:06 UTC 2015


On Tue, Mar 31, 2015, Julien Kauffmann wrote:

> 
> if (!combine)
>     *pval = NULL;
> 

I'd suggest deleting the two lines above. The structure should be cleared
without this and the above line is wrong for non pointer fields anyway.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org


More information about the openssl-dev mailing list