From: Jiasheng Jiang <jiashengjiangcool@gmail.com>
Date: Sat, 2 Aug 2025 15:50:49 +0000 (+0000)
Subject: lib/x509/x509_dn.c: Add check for gnutls_calloc
X-Git-Tag: 3.8.11~21^2~5
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b58b2fb5059636b6ffba75554713b01bc653fb45;p=thirdparty%2Fgnutls.git

lib/x509/x509_dn.c: Add check for gnutls_calloc

Add check for the return value of gnutls_calloc() to avoid potential NULL pointer dereference.

Fixes: 6c9dadf6c ("Moved the gnutls_x509_dn API functions to x509_dn.c")
Signed-off-by: Jiasheng Jiang <jiashengjiangcool@gmail.com>
---

diff --git a/lib/x509/x509_dn.c b/lib/x509/x509_dn.c
index dbfb27f888..e2bb0a7830 100644
--- a/lib/x509/x509_dn.c
+++ b/lib/x509/x509_dn.c
@@ -402,6 +402,10 @@ int gnutls_x509_dn_init(gnutls_x509_dn_t *dn)
 	int result;
 
 	*dn = gnutls_calloc(1, sizeof(gnutls_x509_dn_st));
+	if (*dn == NULL) {
+		gnutls_assert();
+		return GNUTLS_E_MEMORY_ERROR;
+	}
 
 	if ((result = asn1_create_element(_gnutls_get_pkix(), "PKIX1.Name",
 					  &(*dn)->asn)) != ASN1_SUCCESS) {