From: Pauli <pauli@openssl.org>
Date: Wed, 12 May 2021 04:10:49 +0000 (+1000)
Subject: e_loader_attic: fix a use after free issue
X-Git-Tag: openssl-3.0.0-alpha17~148
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b1423d04cdcad9dbbe2da6e4751f0895112cc977;p=thirdparty%2Fopenssl.git

e_loader_attic: fix a use after free issue

Fixes #15116

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15238)
---

diff --git a/engines/e_loader_attic.c b/engines/e_loader_attic.c
index 802b3d90671..4cb98280a53 100644
--- a/engines/e_loader_attic.c
+++ b/engines/e_loader_attic.c
@@ -199,6 +199,7 @@ static OSSL_STORE_INFO *new_EMBEDDED(const char *new_pem_name,
         return NULL;
     }
 
+    data->blob = embedded;
     data->pem_name =
         new_pem_name == NULL ? NULL : OPENSSL_strdup(new_pem_name);
 
@@ -207,7 +208,6 @@ static OSSL_STORE_INFO *new_EMBEDDED(const char *new_pem_name,
         store_info_free(info);
         info = NULL;
     }
-    data->blob = embedded;
 
     return info;
 }