]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 38690ca) | patch
Set rl->packet to NULL after we've finished using it
authorMatt Caswell <matt@openssl.org>
Tue, 23 Apr 2024 15:36:11 +0000 (16:36 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 28 May 2024 12:28:13 +0000 (13:28 +0100)
commitbfb8128190632092b3a66465838b87b469455cec
treea2253b1626f71ad2aa881556ee758e55b197b71atree | snapshot
parent38690cab18de88198f46478565fab423cf534efacommit | diff
Set rl->packet to NULL after we've finished using it

In order to ensure we do not have a UAF we reset the rl->packet pointer
to NULL after we free it.

Follow on from CVE-2024-4741

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24395)
ssl/record/methods/tls_common.c diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git