[openssl-dev] [openssl.org #3782] bug/leak in crypto/ec/ecp_smpl.c

Salz, Rich via RT rt at openssl.org
Mon Apr 6 12:45:10 UTC 2015


around line 135.  The old code has a memory leak, only freeing the BN if
it's NULL.

- if (!group->field)
-     BN_free(group->field);
- if (!group->a)
-     BN_free(group->a);
- if (!group->b)
-     BN_free(group->b);
+ BN_free(group->field);
+ BN_free(group->a);
+ BN_free(group->b);
.




More information about the openssl-dev mailing list