From: Matt Caswell <matt@openssl.org>
Date: Mon, 10 Oct 2016 15:53:11 +0000 (+0100)
Subject: Fix a double free in ca command line
X-Git-Tag: OpenSSL_1_1_0c~61
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=3bceb47a272cc930c48b88743c4734a891b1c09a;p=oweals%2Fopenssl.git

Fix a double free in ca command line

Providing a spkac file with no default section causes a double free.

Thanks to Brian Carpenter for reporting this issue.

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
(cherry picked from commit 229bd12487f8576fc088dc4f641950ac33c62033)
---

diff --git a/apps/ca.c b/apps/ca.c
index 03e08b4a63..af7bb72e69 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1917,7 +1917,6 @@ static int certify_spkac(X509 **xret, const char *infile, EVP_PKEY *pkey,
     sk = CONF_get_section(parms, "default");
     if (sk_CONF_VALUE_num(sk) == 0) {
         BIO_printf(bio_err, "no name/value pairs found in %s\n", infile);
-        CONF_free(parms);
         goto end;
     }