HI,

apps/engine.c, function setup_engine()

It has "return e;" on success,
but the code has:


                /* Free our "structural" reference. */
                ENGINE_free(e);
                }
        return e;

ENGINE_free(e) makes e invalid, so returning it is very dangerous.

The return value mostly seems to be unused though, so perhaps
get fully rid of it.

Spotted also by Coverity.

Ciao, Marcus

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to