]> git.ipfire.org Git - thirdparty/openvpn.git/commit
ssl_openssl.c: Prevent potential double-free
authorLev Stipakov <lev@openvpn.net>
Thu, 17 Apr 2025 13:46:30 +0000 (15:46 +0200)
committerGert Doering <gert@greenie.muc.de>
Thu, 17 Apr 2025 13:59:40 +0000 (15:59 +0200)
commitf7aedca70e24e9a35f0cbd33d1aa708b4daf0055
tree2dbc95804b1172c9093d2e7e7bd7af52bd8033bf
parent7846055717d138e6b1130cec67412acf127e9b78
ssl_openssl.c: Prevent potential double-free

Fixes a potential double-free issue in tls_ctx_load_cert_uri()
by explicitly nullifying the pointer immediately after calling
OSSL_STORE_INFO_free(info).

This ensures that subsequent cleanup won't attempt to free the same
structure again.

Github: closes OpenVPN/openvpn#726

Change-Id: I4507be07cd5573b2117e837ef03187535a38a4b1
Signed-off-by: Lev Stipakov <lev@openvpn.net>
Acked-by: Antonio Quartulli <antonio@mandelbit.com>
Message-Id: <20250417134636.21279-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg31478.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_openssl.c