RT3774: double-free in DSA
authorMartin Vejnar <Martin.Vejnar@avg.com>
Wed, 29 Jul 2015 21:28:19 +0000 (17:28 -0400)
committerRich Salz <rsalz@openssl.org>
Thu, 30 Jul 2015 01:21:58 +0000 (21:21 -0400)
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit fa4629b6a2518d202fd051f228c3d8770682b3be)

crypto/dsa/dsa_ameth.c

index 9fdce81196fa3f2ebd309925bb521442e811c93d..1dd373d8be5d4917b30d993902448d502cf934a1 100644 (file)
@@ -316,6 +316,7 @@ static int dsa_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
     dplen = i2d_ASN1_INTEGER(prkey, &dp);
 
     ASN1_STRING_clear_free(prkey);
+    prkey = NULL;
 
     if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(NID_dsa), 0,
                          V_ASN1_SEQUENCE, params, dp, dplen))