729d2d0e11
- fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey() - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data - fix CVE-2015-0293 - triggerable assert in SSLv2 server
13 lines
489 B
Diff
13 lines
489 B
Diff
diff -up openssl-1.0.1e/crypto/x509/x509_req.c.req-null-deref openssl-1.0.1e/crypto/x509/x509_req.c
|
|
--- openssl-1.0.1e/crypto/x509/x509_req.c.req-null-deref 2013-02-11 16:26:04.000000000 +0100
|
|
+++ openssl-1.0.1e/crypto/x509/x509_req.c 2015-03-18 18:34:35.732448017 +0100
|
|
@@ -92,6 +92,8 @@ X509_REQ *X509_to_X509_REQ(X509 *x, EVP_
|
|
goto err;
|
|
|
|
pktmp = X509_get_pubkey(x);
|
|
+ if (pktmp == NULL)
|
|
+ goto err;
|
|
i=X509_REQ_set_pubkey(ret,pktmp);
|
|
EVP_PKEY_free(pktmp);
|
|
if (!i) goto err;
|