]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Fix use-after-free with EVP_CIPHER_free
authorArne Schwabe <arne@rfc2549.org>
Thu, 1 Jun 2023 09:57:21 +0000 (11:57 +0200)
committerGert Doering <gert@greenie.muc.de>
Sat, 3 Jun 2023 08:02:22 +0000 (10:02 +0200)
commit13f5e615310ea64ab69f521e622a10f2d0ad3f4e
treec99bd511be1617bc46c7b0e383316f05c274afaf
parent72d70b5d8a9d6ac01134df006a03607a79e76294
Fix use-after-free with EVP_CIPHER_free

In many scenarios the context will still have a reference to the cipher, so
this use-after-free does not explode but it is still wrong.

Change-Id: I59002d6613eaef36d5a47b20b56073e399cfa1df
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Antonio Quartulli <a@unstable.cc>
Message-Id: <20230601095721.4065834-1-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg26735.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/crypto_openssl.c