Make sure any ENGINE control commands make local copies of string

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 44a1ba54f70e8e5cb7c748f62407b7c6f43d9d17..b45fea657e791d0cefadccbd3229925a6d887cde 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -92,6 +92,12 @@
  
  Changes between 0.9.6d and 0.9.7  [XX xxx 2002]
 
+  *) Make sure any ENGINE control commands make local copies of string
+     pointers passed to them whenever necessary. Otherwise it is possible
+     the caller may have overwritten (or deallocated) the original string
+     data when a later ENGINE operation tries to use the stored values.
+     [Götz Babin-Ebell <babinebell@trustcenter.de>]
+
   *) Improve diagnostics in file reading and command-line digests.
      [Ben Laurie aided and abetted by Solar Designer <solar@openwall.com>]