The branch openssl-3.0 has been updated
via ea4d670a094a2b5daa13ad13db247653a224a17d (commit)
from f838730d15b6942d3fc401f73715c8789d05b385 (commit)
- Log -----------------------------------------------------------------
commit ea4d670a094a2b5daa13ad13db247653a224a17d
Author: x2018 <xkernel.w...@foxmail.com>
Date: Tue Nov 23 19:25:43 2021 +0800
check the return value of OPENSSL_strdup to prevent potential memory access
error
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Paul Dale <pa...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17110)
(cherry picked from commit dc7e42c6a12637bae1660561d3f4cef039001475)
-----------------------------------------------------------------------
Summary of changes:
apps/lib/engine_loader.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/apps/lib/engine_loader.c b/apps/lib/engine_loader.c
index 2b4480000c..573af76024 100644
--- a/apps/lib/engine_loader.c
+++ b/apps/lib/engine_loader.c
@@ -91,7 +91,7 @@ static OSSL_STORE_LOADER_CTX *engine_open(const
OSSL_STORE_LOADER *loader,
keyid = OPENSSL_strdup(q + 1);
}
- if (e != NULL)
+ if (e != NULL && keyid != NULL)
ctx = OSSL_STORE_LOADER_CTX_new(e, keyid);
if (ctx == NULL) {
