CVSROOT: /cvs Module name: src Changes by: [email protected] 2020/02/16 07:33:04
Modified files:
lib/libssl : s3_lib.c ssl_srvr.c
Log message:
Avoid leak for tmp.x25519
Changed to use local variable to hold malloc address rather than directly
set to S3I(s)->tmp.x25519, and set that private_key pointer to
S3I(s)->tmp.x25519 after all the "goto err;".
Also added freezero for S3I(s)->tmp.x25519 to ssl3_free() and ssl3_clear().
ok jsing@ tb@
