projects / oweals / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2f4023e) | patch
Prevent use after free of global_engine_lock
authorTomas Mraz <tmraz@fedoraproject.org>
Thu, 21 May 2020 11:16:57 +0000 (13:16 +0200)
committerTomas Mraz <tmraz@fedoraproject.org>
Fri, 22 May 2020 12:50:35 +0000 (14:50 +0200)
commite512efe0894481679a5d3c57d10bf4ea97046c2a
tree2159841535dceb57890b8a1b4263637324bc9fd4tree | snapshot
parent2f4023e88962d3375ff30ad5011a310dacf0ad3fcommit | diff
Prevent use after free of global_engine_lock

If buggy application calls engine functions after cleanup of engines
already happened the global_engine_lock will be used although
already freed.

See for example:
https://bugzilla.redhat.com/show_bug.cgi?id=1831086

Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/11896)

(cherry picked from commit e12813d0d31f4f7be2ccc592d382ef3e94bdb842)
crypto/engine/eng_lib.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.