[openssl-dev] [openssl.org #3917] Bug report -- potential memory leak

[Martin Vejnár via RT]

Hi,

affects all systems, happens at least in OpenSSL 1.0.2c.

In `crypto/cms/cms_smime.c`, the function `CMS_verify` will leak memory pointed to by `cms_certs` and `crls` variables if the call to `BIO_new_mem_buf` on line 374 fails.

Thanks,
--
Martin


-------------- next part --------------
_______________________________________________
openssl-bugs-mod mailing list
openssl-bugs-mod at openssl.org
https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod