]> git.ipfire.org Git - thirdparty/openssl.git/commit
Fix potential memory leak on failure of dsa_gen_init()
authorNiels Dossche <niels.dossche@ugent.be>
Wed, 20 Nov 2024 19:22:43 +0000 (20:22 +0100)
committerTomas Mraz <tomas@openssl.org>
Mon, 25 Nov 2024 14:11:08 +0000 (15:11 +0100)
commitd7e8f6f7816f2be3ab5e498d180424940fd58695
treeee78f99100f835a9f706087caa1f6ea7b35fa0d8
parentea5817854cf67b89c874101f209f06ae016fd333
Fix potential memory leak on failure of dsa_gen_init()

When dsa_gen_set_params()  returns 0, it could have duplicated the memory for the parameter
OSSL_PKEY_PARAM_FFC_DIGEST already in gctx->mdname, leading to a memory leak.

Allocated here: https://github.com/openssl/openssl/blob/47a80fd2034cd4314d3b4958539dcd3106087109/providers/implementations/keymgmt/dsa_kmgmt.c#L524
Can return 0 here: https://github.com/openssl/openssl/blob/47a80fd2034cd4314d3b4958539dcd3106087109/providers/implementations/keymgmt/dsa_kmgmt.c#L529-L536

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/26016)
providers/implementations/keymgmt/dsa_kmgmt.c