CVSROOT: /cvs
Module name: src
Changes by: d...@cvs.openbsd.org 2014/12/06 12:26:37
Modified files:
lib/libssl/src/crypto/x509: x509_trs.c
lib/libssl/src/crypto/x509v3: v3_purp.c
Log message:
Avoid modifying input on failure in X509_(TRUST|PURPOSE)_add.
If X509_TRUST_add() or X509_PURPOSE_add() fail, they will leave the
object in an inconsistent state since the name is already freed.
This commit avoids changing the original name unless the *_add() call
will succeed.
Based on BoringSSL's commit: ab2815eaff6219ef57aedca2f7b1b72333c27fd0
ok miod@
