From: Martin Vejnar <Martin.Vejnar@avg.com>
Date: Wed, 29 Jul 2015 21:28:19 +0000 (-0400)
Subject: RT3774: double-free in DSA
X-Git-Tag: OpenSSL_1_0_0t~24
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=86fecb23df64a87dc9833f8d88f7c3f9c704f6b9;p=oweals%2Fopenssl.git

RT3774: double-free in DSA

Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit fa4629b6a2518d202fd051f228c3d8770682b3be)
---

diff --git a/crypto/dsa/dsa_ameth.c b/crypto/dsa/dsa_ameth.c
index 9fdce81196..1dd373d8be 100644
--- a/crypto/dsa/dsa_ameth.c
+++ b/crypto/dsa/dsa_ameth.c
@@ -316,6 +316,7 @@ static int dsa_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
     dplen = i2d_ASN1_INTEGER(prkey, &dp);
 
     ASN1_STRING_clear_free(prkey);
+    prkey = NULL;
 
     if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(NID_dsa), 0,
                          V_ASN1_SEQUENCE, params, dp, dplen))