From: Tat Sing Kong <[EMAIL PROTECTED]>

tsk> OCSP_REQUEST_free(pOCSPRequest);
tsk> OCSP_RESPONSE_free(pResponse);
tsk> 
tsk> // Next line crashes
tsk> OCSP_BASICRESP_free(pOCSPBasic);
tsk> OCSP_CERTID_free(pID);

I haven't looked closely at the code yet, so I may be wrong.  However,
it strikes me that a BASICRESP is usually part of a RESPONSE, so the
stuff that pOCSPBasic points might have been free'd already through
freeing pResponse, and if that is the case, you're doing a double
free of the same memory blob, which is never a good thing.

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to