]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Fix use-after-free with EVP_CIPHER_free
authorArne Schwabe <arne@rfc2549.org>
Thu, 1 Jun 2023 09:57:21 +0000 (11:57 +0200)
committerGert Doering <gert@greenie.muc.de>
Sat, 3 Jun 2023 08:02:54 +0000 (10:02 +0200)
commit205c66bd0ed2661c47b9fe7317089fbb09cc7aa4
treeaeeaafab445534dc59f141cd2e9bf7d81d64c3eb
parentcfcc20ff2bf184edb06e2d918d697f0ef81a0e82
Fix use-after-free with EVP_CIPHER_free

In many scenarios the context will still have a reference to the cipher, so
this use-after-free does not explode but it is still wrong.

Change-Id: I59002d6613eaef36d5a47b20b56073e399cfa1df
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Antonio Quartulli <a@unstable.cc>
Message-Id: <20230601095721.4065834-1-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg26735.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit 13f5e615310ea64ab69f521e622a10f2d0ad3f4e)
src/openvpn/crypto_openssl.c