diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2016-05-03 15:05:31 +0100 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2016-05-04 12:57:41 +0100 |
| commit | 3340e8bb186f689df5720352f65a9c0c42b6046b (patch) | |
| tree | 118de654e6734d54c0be3a44a8f578073f83b92d /crypto/asn1/d2i_pr.c | |
| parent | 16e1b281b2e16ff6deb8ca431dfc5743de31d0e2 (diff) | |
| download | openssl-3340e8bb186f689df5720352f65a9c0c42b6046b.zip openssl-3340e8bb186f689df5720352f65a9c0c42b6046b.tar.gz openssl-3340e8bb186f689df5720352f65a9c0c42b6046b.tar.bz2 | |
Fix double free in d2i_PrivateKey().
RT#4527
Reviewed-by: Matt Caswell <matt@openssl.org>
Diffstat (limited to 'crypto/asn1/d2i_pr.c')
| -rw-r--r-- | crypto/asn1/d2i_pr.c | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/crypto/asn1/d2i_pr.c b/crypto/asn1/d2i_pr.c index 85567ce..48a845f 100644 --- a/crypto/asn1/d2i_pr.c +++ b/crypto/asn1/d2i_pr.c @@ -93,15 +93,17 @@ EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp, if (!ret->ameth->old_priv_decode || !ret->ameth->old_priv_decode(ret, &p, length)) { if (ret->ameth->priv_decode) { + EVP_PKEY *tmp; PKCS8_PRIV_KEY_INFO *p8 = NULL; p8 = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, length); if (!p8) goto err; - EVP_PKEY_free(ret); - ret = EVP_PKCS82PKEY(p8); + tmp = EVP_PKCS82PKEY(p8); PKCS8_PRIV_KEY_INFO_free(p8); - if (ret == NULL) + if (tmp == NULL) goto err; + EVP_PKEY_free(ret); + ret = tmp; } else { ASN1err(ASN1_F_D2I_PRIVATEKEY, ERR_R_ASN1_LIB); goto err; |