Hello gods,

http://seclists.org/fulldisclosure/2016/Oct/62
->
https://github.com/guidovranken/openssl-x509-vulnerabilities
 
a little bit old, but LibreSSL got this?
 

The original X509_NAME decode free code was buggy: this
could result in double free or leaks if a malloc failure
occurred.
Simplify and fix the logic.
Thanks to Guido Vranken for reporting this issue.
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from #1691)
 
Thanks!

Reply via email to