The branch OpenSSL_1_0_2-stable has been updated via e78dc7e279ed98e1ab9845a70d14dafdfdc88f58 (commit) from 4256957570a233ed4e9840353e95e623dfd62086 (commit)
- Log ----------------------------------------------------------------- commit e78dc7e279ed98e1ab9845a70d14dafdfdc88f58 Author: Matt Caswell <m...@openssl.org> Date: Mon Mar 14 17:06:19 2016 +0000 Fix a potential double free in EVP_DigestInit_ex There is a potential double free in EVP_DigestInit_ex. This is believed to be reached only as a result of programmer error - but we should fix it anyway. Issue reported by Guido Vranken. Reviewed-by: Richard Levitte <levi...@openssl.org> (cherry picked from commit ffe9150b1508a0ffc9e724f975691f24eb045c05) ----------------------------------------------------------------------- Summary of changes: crypto/evp/digest.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/crypto/evp/digest.c b/crypto/evp/digest.c index f2643f3..5b642b2 100644 --- a/crypto/evp/digest.c +++ b/crypto/evp/digest.c @@ -212,8 +212,10 @@ int EVP_DigestInit_ex(EVP_MD_CTX *ctx, const EVP_MD *type, ENGINE *impl) } #endif if (ctx->digest != type) { - if (ctx->digest && ctx->digest->ctx_size) + if (ctx->digest && ctx->digest->ctx_size) { OPENSSL_free(ctx->md_data); + ctx->md_data = NULL; + } ctx->digest = type; if (!(ctx->flags & EVP_MD_CTX_FLAG_NO_INIT) && type->ctx_size) { ctx->update = type->update; _____ openssl-commits mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits