openssl#20299: Fixed use after free bug
authorJeeban Sethi <jeeban@Jeebans-MacBook-Air.local>
Wed, 15 Feb 2023 18:57:12 +0000 (00:27 +0530)
committerTodd Short <todd.short@me.com>
Mon, 20 Feb 2023 14:49:36 +0000 (09:49 -0500)
CLA: trivial

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Todd Short <todd.short@me.com>
(Merged from https://github.com/openssl/openssl/pull/20300)

ssl/ssl_lib.c

index 44ba62ffde2135999371345057b3c9bdbfbae4c9..a2e266696208fcf9748d0e2a8ef4081724462055 100644 (file)
@@ -739,6 +739,7 @@ SSL *ossl_ssl_connection_new_int(SSL_CTX *ctx, const SSL_METHOD *method)
     if (!ossl_ssl_init(ssl, ctx, method, SSL_TYPE_SSL_CONNECTION)) {
         OPENSSL_free(s);
         s = NULL;
+        ssl = NULL;
         goto sslerr;
     }