]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6945c41) | patch
ssl: set tmp.pkey only after successful derive
authorJoshua Rogers <MegaManSec@users.noreply.github.com>
Sat, 11 Oct 2025 12:05:38 +0000 (20:05 +0800)
committerTomas Mraz <tomas@openssl.org>
Fri, 17 Oct 2025 17:30:45 +0000 (19:30 +0200)
commitb8d80f0e9346ef7645dbc71a3e44b8087b70f3f2
treef29939b70470861aaa6578a67eb90cfd4ff01b21tree | snapshot
parent6945c416bb86c85079840789a2e09102818e57b3commit | diff
ssl: set tmp.pkey only after successful derive

Assign s->s3.tmp.pkey after ssl_derive succeeds and free skey on failure
to avoid a dangling state.

Signed-off-by: Joshua Rogers <MegaManSec@users.noreply.github.com>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28878)
ssl/statem/extensions_srvr.c diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git