CVSROOT: /cvs
Module name: src
Changes by: d...@cvs.openbsd.org 2015/02/15 15:29:02
Modified files:
lib/libssl/src/crypto/dsa: dsa_gen.c
Log message:
Avoid calling BN_CTX_end() on a context that wasn't started.
In dsa_builtin_paramgen(), if BN_MONT_CTX_new() fails, the BN_CTX_new()
call above it will have allocated a ctx without calling BN_CTX_start() on
it. The error handling calls BN_CTX_end() when ctx is allocated.
Move the BN_MONT_CTX_new() call up so it will fail first without splitting
up the BN_CTX_new() and BN_CTX_start().
tweak + ok miod@, ok bcook@
