isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Avoid calling SSL_CTX_free() on an uninitialized pointer in an error path.

Browse Source
This commit is contained in:
Todd C. Miller
2019-11-15 12:26:44 -07:00
parent f08c98a6aa
commit c9da8d4084
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
logsrvd/sendlog.c
View File

@@ -115,7 +115,7 @@ static SSL_CTX *
init_tls_client_context(const char *ca_bundle_file, const char *cert_file, const char *key_file) init_tls_client_context(const char *ca_bundle_file, const char *cert_file, const char *key_file)
{ {
const SSL_METHOD *method; const SSL_METHOD *method;
SSL_CTX *ctx; SSL_CTX *ctx = NULL;
debug_decl(init_tls_client_context, SUDO_DEBUG_UTIL) debug_decl(init_tls_client_context, SUDO_DEBUG_UTIL)
@@ -164,8 +164,7 @@ init_tls_client_context(const char *ca_bundle_file, const char *cert_file, const
goto exit; goto exit;
bad: bad:
if (ctx) SSL_CTX_free(ctx);
SSL_CTX_free(ctx);
exit: exit:
return ctx; return ctx;