CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2022/02/11 10:37:54
Modified files: lib/libcrypto/x509: x509_alt.c Log message: Fix a double free in v2i_NAME_CONSTRAINTS() a2i_GENERAL_NAME() modifies and returns the out argument that was passed in unless out == NULL, in which case it returns something freshly allocated. Thus, in v2i_GENERAL_NAME_ex() we must only free ret if out == NULL so v2i_NAME_CONSTRAINTS() can free correctly. Issue reported by Volker Schlecht ok jsing