On 12.11.2014 03:28, Dr Stephen Henson wrote:
> I just checked the sources and this was fixed in OpenSSL 0.9.7m just over 7
> years ago...

For 0.9.8, it was fixed with 0.9.8e:

https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=900f7a87760d1053127976480efcd71371787d6e

I.e., given that for 2.4.x, we still "support" 0.9.8a (and for 2.2.x,
even 0.9.6 something), the ERR_free_strings() call should probably be
wrapped by a suitable "#if (OPENSSL_VERSION_NUMBER >= ...".

Kaspar

Reply via email to