RT3774: double-free in DSA
authorMartin Vejnar <Martin.Vejnar@avg.com>
Wed, 29 Jul 2015 21:28:19 +0000 (17:28 -0400)
committerRich Salz <rsalz@openssl.org>
Thu, 30 Jul 2015 01:21:00 +0000 (21:21 -0400)
Reviewed-by: Matt Caswell <matt@openssl.org>
crypto/dsa/dsa_ameth.c

index 73dd158ceea70de76720ad3bd9c4d3e234168022..0002e0810e34531231f063a277ac9ecf3a290990 100644 (file)
@@ -321,6 +321,7 @@ static int dsa_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
     dplen = i2d_ASN1_INTEGER(prkey, &dp);
 
     ASN1_STRING_clear_free(prkey);
+    prkey = NULL;
 
     if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(NID_dsa), 0,
                          V_ASN1_SEQUENCE, params, dp, dplen))