From: Jonas Maebe Date: Sun, 8 Dec 2013 22:30:09 +0000 (+0100) Subject: ssl3_get_certificate_request: check for NULL after allocating s->cert->ctypes X-Git-Tag: master-post-reformat~174 X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff_plain;h=9052ffda912a48bfb0f6aa1555a97e313ee54642 ssl3_get_certificate_request: check for NULL after allocating s->cert->ctypes Signed-off-by: Kurt Roeckx Reviewed-by: Matt Caswell --- diff --git a/ssl/s3_clnt.c b/ssl/s3_clnt.c index c5f6ceb5c0..e178fe12ad 100644 --- a/ssl/s3_clnt.c +++ b/ssl/s3_clnt.c @@ -2145,6 +2145,11 @@ int ssl3_get_certificate_request(SSL *s) { /* If we exceed static buffer copy all to cert structure */ s->cert->ctypes = OPENSSL_malloc(ctype_num); + if (s->cert->ctypes == NULL) + { + SSLerr(SSL_F_SSL3_GET_CERTIFICATE_REQUEST,ERR_R_MALLOC_FAILURE); + goto err; + } memcpy(s->cert->ctypes, p, ctype_num); s->cert->ctype_num = (size_t)ctype_num; ctype_num=SSL3_CT_NUMBER;