]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Fix use-after-free in tls_ctx_use_management_external_key
authorSteffan Karger <steffan@karger.me>
Sun, 7 Oct 2018 10:00:32 +0000 (12:00 +0200)
committerGert Doering <gert@greenie.muc.de>
Sun, 7 Oct 2018 12:03:21 +0000 (14:03 +0200)
commit68e0b9db253ff0437047d6a5377eeec6002873f8
tree593d9049ece682b0f41b764175aeb88d331cbc4a
parentf755c992915b25acd114ef98e61dd9eae7ff57fe
Fix use-after-free in tls_ctx_use_management_external_key

Commit 98bfeeb4 changed our openssl backend implementation of
tls_ctx_use_management_external_key() to no longer use
tls_ctx_load_cert_file_and_copy(), but still free'd 'cert'. Which it no
longer should do. Credits go to Arne for spotting the issue (even though
it was missed during the review).

The offending commit is only recently applied to the master branch, so was
never part of a OpenVPN release. For that reason I did not do full impact
analysis.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <20181007100032.17060-1-steffan@karger.me>
URL: https://www.mail-archive.com/search?l=mid&q=20181007100032.17060-1-steffan@karger.me
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_openssl.c