mirror of
https://git.freebsd.org/ports.git
synced 2025-06-07 13:50:38 -04:00
Security: http://openssl.org/news/secadv_20101116.txt Security: CVE-2010-3864 PR: 152312 Submitted by: Alexander Wittig - Fix regression in TLS handling Obtained from: http://cvs.openssl.org/chngview?cn=19998
16 lines
670 B
C
16 lines
670 B
C
Index: openssl/ssl/t1_lib.c
|
|
RCS File: /v/openssl/cvs/openssl/ssl/t1_lib.c,v
|
|
rcsdiff -q -kk '-r1.64.2.15' '-r1.64.2.16' -u '/v/openssl/cvs/openssl/ssl/t1_lib.c,v' 2>/dev/null
|
|
--- ssl/t1_lib.c 2010/11/16 13:26:24 1.64.2.15
|
|
+++ ssl/t1_lib.c 2010/11/16 22:41:07 1.64.2.16
|
|
@@ -779,8 +779,8 @@
|
|
{
|
|
if(s->session->tlsext_ecpointformatlist)
|
|
{
|
|
- *al = TLS1_AD_DECODE_ERROR;
|
|
- return 0;
|
|
+ OPENSSL_free(s->session->tlsext_ecpointformatlist);
|
|
+ s->session->tlsext_ecpointformatlist = NULL;
|
|
}
|
|
s->session->tlsext_ecpointformatlist_length = 0;
|
|
if ((s->session->tlsext_ecpointformatlist = OPENSSL_malloc(ecpointformatlist_length)) == NULL)
|