root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions 7 Packages Projects Releases Wiki Activity
openssl/ssl
History
Niels Dossche b00a6f09c5 Fix memory leak in tls_parse_ctos_psk() 
`sess` is not NULL at this point, and is freed on the success path, but
not on the error path. Fix this by going to the `err` label such that
`SSL_SESSION_free(sess)` is called.

CLA: trivial

Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25643)

(cherry picked from commit b2474b287f)
 		2024-10-11 14:54:47 +02:00
..
record Copyright year updates 2024-06-04 16:25:21 +02:00
statem Fix memory leak in tls_parse_ctos_psk() 2024-10-11 14:54:47 +02:00
bio_ssl.c Copyright year updates 2024-09-03 15:28:11 +02:00
build.info Do not duplicate symbols between libcrypto and libssl in static builds 2021-06-14 09:21:05 +10:00
d1_lib.c Move freeing of an old enc_write_ctx/write_hash to dtls1_clear_sent_buffer 2023-11-24 10:56:33 +00:00
d1_msg.c Update copyright year 2020-11-26 14:18:57 +00:00
d1_srtp.c Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() call 2020-11-11 12:12:11 +01:00
ktls.c Update copyright year 2022-10-11 13:20:27 +01:00
methods.c Update some inclusions of <openssl/macros.h> 2019-11-07 11:37:25 +01:00
pqueue.c Update copyright year 2020-11-26 14:18:57 +00:00
s3_cbc.c fips module header inclusion fine-tunning 2021-07-06 10:52:27 +10:00
s3_enc.c Don't attempt to set provider params on an ENGINE based cipher 2023-12-12 16:20:21 +00:00
s3_lib.c Fix a bad backport 2023-11-09 19:22:50 +01:00
s3_msg.c Update copyright year 2021-05-20 14:22:33 +01:00
ssl_asn1.c Make the -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION pass tests 2021-08-31 12:20:12 +02:00
ssl_cert.c Update copyright year 2023-05-30 14:29:35 +02:00
ssl_cert_table.h Following the license change, modify the boilerplates in ssl/ 2018-12-06 14:20:59 +01:00
ssl_ciph.c Fix a possible memory leak in load_builtin_compressions 2023-11-02 08:17:32 +00:00
ssl_conf.c Consolidate raising errors in SSL_CONF_cmd() 2023-12-19 12:07:01 +01:00
ssl_err.c Add reason codes with the correct offset for two alerts 2024-05-14 15:29:08 +02:00
ssl_err_legacy.c Update copyright year 2021-06-17 13:24:59 +01:00
ssl_init.c Update copyright year 2022-06-21 14:03:39 +01:00
ssl_lib.c Fix SSL_select_next_proto 2024-06-27 10:39:47 +01:00
ssl_local.h ssl_log_secret call in tls13_key_update 2022-09-27 15:56:51 +01:00
ssl_mcnf.c Consolidate raising errors in SSL_CONF_cmd() 2023-12-19 12:07:01 +01:00
ssl_rsa.c Convert serverinfo in SSL_CTX_use_serverinfo() to v2. 2022-08-26 13:11:01 +10:00
ssl_rsa_legacy.c Deprecate RSA harder 2020-11-18 23:38:34 +01:00
ssl_sess.c fix undefined behavior on 3.1 2024-08-27 20:38:15 +02:00
ssl_stat.c Update copyright year 2021-09-07 13:29:33 +02:00
ssl_txt.c Update copyright year 2022-05-03 13:36:42 +01:00
ssl_utst.c Reorganize local header files 2019-09-28 20:26:35 +02:00
sslerr.h err: rename err_load_xxx_strings_int functions 2021-05-26 13:01:47 +10:00
t1_enc.c Don't attempt to set provider params on an ENGINE based cipher 2023-12-12 16:20:21 +00:00
t1_lib.c Fix handling of max_fragment_length extension for PSK 2024-06-20 16:52:28 +02:00
t1_trce.c Update copyright year 2021-02-18 15:05:17 +00:00
tls13_enc.c ssl_log_secret call in tls13_key_update 2022-09-27 15:56:51 +01:00
tls_depr.c Replace the AES-128-CBC-HMAC-SHA1 cipher in e_ossltest.c 2021-10-11 16:25:17 +02:00
tls_srp.c ssl/tls_srp.c: Add check for BN_dup 2022-07-08 13:11:26 -04:00