From: Kurt Roeckx <kurt@roeckx.be>
Date: Sun, 5 Mar 2017 20:00:11 +0000 (+0100)
Subject: Fix double free in cookie generation.
X-Git-Tag: OpenSSL_1_1_1-pre1~2102
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=febb0afaef47ed74b2bdbde0b4278263390f4185;p=oweals%2Fopenssl.git

Fix double free in cookie generation.

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
GH: #2850
---

diff --git a/ssl/statem/extensions_clnt.c b/ssl/statem/extensions_clnt.c
index 23dc8d3363..8860462a1f 100644
--- a/ssl/statem/extensions_clnt.c
+++ b/ssl/statem/extensions_clnt.c
@@ -658,6 +658,7 @@ int tls_construct_ctos_cookie(SSL *s, WPACKET *pkt, unsigned int context,
     ret = 1;
  end:
     OPENSSL_free(s->ext.tls13_cookie);
+    s->ext.tls13_cookie = NULL;
     s->ext.tls13_cookie_len = 0;
 
     return ret;