From: Simon Josefsson <simon@josefsson.org>
Date: Thu, 17 Apr 2008 09:33:25 +0000 (+0200)
Subject: Don't use alloca, the certificate list can be larger than stack size.
X-Git-Tag: gnutls_2_3_6~18
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=37f27eeb6694288d1985eb89c3fa1f4d0fc6c3e6;p=thirdparty%2Fgnutls.git

Don't use alloca, the certificate list can be larger than stack size.
---

diff --git a/lib/auth_cert.c b/lib/auth_cert.c
index cfa80cefb8..91567cb25a 100644
--- a/lib/auth_cert.c
+++ b/lib/auth_cert.c
@@ -1180,7 +1180,7 @@ _gnutls_proc_openpgp_server_certificate (gnutls_session_t session,
     }
 
   peer_certificate_list =
-    gnutls_alloca (sizeof (gnutls_cert) * (peer_certificate_list_size));
+    gnutls_malloc (sizeof (gnutls_cert) * (peer_certificate_list_size));
   if (peer_certificate_list == NULL)
     {
       gnutls_assert ();
@@ -1221,7 +1221,7 @@ cleanup:
 
   _gnutls_free_datum (&akey);
   CLEAR_CERTS;
-  gnutls_afree (peer_certificate_list);
+  gnutls_free (peer_certificate_list);
   return ret;
 
 }