Hello,

patch attached.

Ilya
From c996eebf03a4c5585d2c3045407c827de60c88d5 Mon Sep 17 00:00:00 2001
From: Ilya Shipitsin <chipits...@gmail.com>
Date: Sun, 14 May 2023 17:45:36 +0200
Subject: [PATCH] LibreSSL: missing malloc failure check added

found during LibreSSL code audit
---
 src/lib/libcrypto/asn1/bio_ndef.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/lib/libcrypto/asn1/bio_ndef.c b/src/lib/libcrypto/asn1/bio_ndef.c
index d0329ede8..1286f220e 100644
--- a/src/lib/libcrypto/asn1/bio_ndef.c
+++ b/src/lib/libcrypto/asn1/bio_ndef.c
@@ -181,6 +181,8 @@ ndef_prefix(BIO *b, unsigned char **pbuf, int *plen, void *parg)
 
 	derlen = ASN1_item_ndef_i2d(ndef_aux->val, NULL, ndef_aux->it);
 	p = malloc(derlen);
+	if (p == NULL)
+		return 0;
 	ndef_aux->derbuf = p;
 	*pbuf = p;
 	derlen = ASN1_item_ndef_i2d(ndef_aux->val, &p, ndef_aux->it);
@@ -253,6 +255,8 @@ ndef_suffix(BIO *b, unsigned char **pbuf, int *plen, void *parg)
 
 	derlen = ASN1_item_ndef_i2d(ndef_aux->val, NULL, ndef_aux->it);
 	p = malloc(derlen);
+	if (p == NULL)
+		return 0;
 	ndef_aux->derbuf = p;
 	*pbuf = p;
 	derlen = ASN1_item_ndef_i2d(ndef_aux->val, &p, ndef_aux->it);
-- 
2.40.1

Reply via email to