]> git.ipfire.org Git - thirdparty/openssl.git/commit
Replace and Deprecate TS_VERIFY_CTX Functions
authorerbsland-dev <github@erbsland.dev>
Fri, 21 Jun 2024 13:16:10 +0000 (15:16 +0200)
committerTomas Mraz <tomas@openssl.org>
Wed, 10 Jul 2024 07:39:53 +0000 (09:39 +0200)
commit6f811d839fd637fa5dea0ee4286722847ab74b98
treedbad6a017880dbbda8266009d6e1cc7f44e6e7fe
parent775188702574dcd6cc53b7a9d3501a639c146121
Replace and Deprecate TS_VERIFY_CTX Functions

Fixes #18854

Replace and deprecate the functions `TS_VERIFY_CTX_set_data`,
`TS_VERIFY_CTX_set_store`, `TS_VERIFY_CTX_set_certs`, `TS_VERIFY_CTX_set_imprint`
with new versions: `TS_VERIFY_CTX_set0_data`,
`TS_VERIFY_CTX_set0_store`, `TS_VERIFY_CTX_set0_certs` and `TS_VERIFY_CTX_set0_imprint`.

The previous functions had poorly documented memory handling, potentially
leading to memory leaks. The new functions improve memory management and provide
clearer usage.

Also, update existing code to use the new function calls instead of the deprecated
ones.

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24701)
apps/ts.c
crypto/ts/ts_verify_ctx.c
include/openssl/ts.h