From: Pavel Kopyl
Date: Fri, 3 Nov 2017 19:18:35 +0000 (+0300)
Subject: do_body: fix heap-use-after-free.
X-Git-Tag: OpenSSL_1_1_1-pre2~43
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=59053968e756e9063c512fba59717c32621e3f1a;p=oweals%2Fopenssl.git
do_body: fix heap-use-after-free.
The memory pointed to by the 'push' is freed by the
X509_NAME_ENTRY_free() in do_body(). The second time
it is referenced to (indirectly) in certify_cert:X509_REQ_free().
Reviewed-by: Rich Salz
Reviewed-by: Matt Caswell
(Merged from https://github.com/openssl/openssl/pull/4698)
---
diff --git a/apps/ca.c b/apps/ca.c
index 26c077858f..2819fead40 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1556,7 +1556,6 @@ static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
if (push != NULL) {
if (!X509_NAME_add_entry(subject, push, -1, 0)) {
- X509_NAME_ENTRY_free(push);
BIO_printf(bio_err, "Memory allocation failure\n");
goto end;
}