CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2024/05/06 08:36:05
Modified files:
lib/libcrypto/lhash: lhash.c
Log message:
Guard call to contract() from doall_util_fn().
It is not safe to unconditionally call contract() - when called repeatedly
it will shrink the bucket array to zero and then attempt to access that
allocation on the next call. Use the same guard that is used in
lh_delete().
Issue found when investigating haproxy crashes reported by wizard-it on
GitHub.
ok tb@
