Skip to main content
Revision 39c76ceb2d3e51eaff95e04d6e4448f685718f8d authored by Viktor Dukhovni on 02 September 2015, 01:47:12 UTC, committed by Viktor Dukhovni on 02 September 2015, 14:01:23 UTC
Better handling of verify param id peername field
Initialize pointers in param id by the book (explicit NULL assignment,
rather than just memset 0).

In x509_verify_param_zero() set peername to NULL after freeing it.

In x509_vfy.c's internal check_hosts(), avoid potential leak of
possibly already non-NULL peername.  This is only set when a check
succeeds, so don't need to do this repeatedly in the loop.

Reviewed-by: Richard Levitte <levitte@openssl.org>

(cherry picked from commit a0724ef1c9b9e2090bdd96b784f492b6a3952957)
1 parent 0a1682d
Raw File
FAQ
The FAQ is now maintained on the web:
        https://www.openssl.org/docs/faq.html
back to top