diff options
| author | Werner Koch <[email protected]> | 2014-12-22 11:16:46 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2014-12-22 11:39:14 +0000 |
| commit | abd5f6752d693b7f313c19604f0723ecec4d39a6 (patch) | |
| tree | fb2795cad36a6e6d052d9c9da411db926086552a /dirmngr/crlfetch.c | |
| parent | scd: ECDH Support. (diff) | |
| download | gnupg-abd5f6752d693b7f313c19604f0723ecec4d39a6.tar.gz gnupg-abd5f6752d693b7f313c19604f0723ecec4d39a6.zip | |
dirmngr,gpgsm: Return NULL on fail
* dirmngr/ldapserver.c (ldapserver_parse_one): Set SERVER to NULL.
* sm/gpgsm.c (parse_keyserver_line): Ditto.
--
Reported-by: Joshua Rogers <[email protected]>
"If something inside the ldapserver_parse_one function failed,
'server' would be freed, then returned, leading to a
use-after-free. This code is likely copied from sm/gpgsm.c, which
was also susceptible to this bug."
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'dirmngr/crlfetch.c')
0 files changed, 0 insertions, 0 deletions