CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2023/03/11 08:50:13
Modified files: lib/libcrypto/asn1: bio_ndef.c Log message: Fix double free after BIO_new_NDEF() Once the asn_bio is prepended to the out chain, and before the asn1_cb() has done its thing, asn_bio needs to be popped off again on error. Failing to do this can cause write after frees or double frees when the out BIO is used after the function returned. Based on a very complicated diff by Matt Caswell and Viktor Dukhovni. This was part of the fixes in OpenSSL 1.1.1t. ok jsing