CVSROOT: /cvs Module name: src Changes by: [email protected] 2021/03/21 10:56:42
Modified files:
lib/libssl : tls13_lib.c
Log message:
Avoid a use-after-scope in tls13_cert_add().
A parent CBB retains a reference to a child CBB until CBB_flush() or
CBB_cleanup() is called. As such, the cert_exts CBB must be at function
scope.
Reported by Ilya Shipitsin.
ok tb@
