From: Todd Short <tshort@akamai.com>
Date: Wed, 31 Jan 2018 21:20:52 +0000 (-0500)
Subject: Free pha_dgst in SSL_clear()
X-Git-Tag: OpenSSL_1_1_1-pre1~71
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=88834998dda00a713abe3a17d6caebba2f70318d;p=oweals%2Fopenssl.git

Free pha_dgst in SSL_clear()

Reviewed-by: Ben Kaduk <kaduk@mit.edu>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4964)
---

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 5a5fbad1f6..68a9b19087 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -614,6 +614,9 @@ int SSL_clear(SSL *s)
 
     s->key_update = SSL_KEY_UPDATE_NONE;
 
+    EVP_MD_CTX_free(s->pha_dgst);
+    s->pha_dgst = NULL;
+
     /* Reset DANE verification result state */
     s->dane.mdpth = -1;
     s->dane.pdpth = -1;