projects / oweals / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b8f1c11) | patch
Client side CKE processing can double free on error
authorMatt Caswell <matt@openssl.org>
Thu, 28 Apr 2016 14:12:37 +0000 (15:12 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 29 Apr 2016 08:17:51 +0000 (09:17 +0100)
commit6f137370dd52c11ecfd73a2dd7a07a52b8435891
tree49dddb123be5b1bfae2c57e3e05701002327e824tree | snapshot
parentb8f1c116a357285ccb4905cd88c83f5076bafb52commit | diff
Client side CKE processing can double free on error

The tls_client_key_exchange_post_work() frees the pms on error. It also
calls ssl_generate_master_secret() which also free the pms. If an error
occurs after ssl_generate_master_secret() has been called then a double
free can occur.

Reviewed-by: Andy Polyakov <appro@openssl.org>
ssl/statem/statem_clnt.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.