Fix a double free in ca command line
authorMatt Caswell <matt@openssl.org>
Mon, 10 Oct 2016 15:53:11 +0000 (16:53 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 28 Oct 2016 08:25:04 +0000 (09:25 +0100)
Providing a spkac file with no default section causes a double free.

Thanks to Brian Carpenter for reporting this issue.

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
apps/ca.c

index b95f2efa0b5667c06afd2ea566dac3db311a004f..b6ab00abc635d3c735077c4bc5eb517d02aa2b6e 100644 (file)
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1912,7 +1912,6 @@ static int certify_spkac(X509 **xret, const char *infile, EVP_PKEY *pkey,
     sk = CONF_get_section(parms, "default");
     if (sk_CONF_VALUE_num(sk) == 0) {
         BIO_printf(bio_err, "no name/value pairs found in %s\n", infile);
-        CONF_free(parms);
         goto end;
     }