CVSROOT:        /cvs
Module name:    src
Changes by:     t...@cvs.openbsd.org    2022/04/20 07:32:34

Modified files:
        lib/libcrypto/bn: bn_exp.c 

Log message:
Avoid use of uninitialized in BN_mod_exp_recp()

If either of the two initial BN_CTX_get() fails, we will call
BN_RECP_CTX_free() on the uninitialized recp, which won't end
well, so hoist the BN_RECP_CTX_init() call a few lines up.

>From Pauli, OpenSSL ad249412

ok inoguchi jsing

Reply via email to