CVSROOT: /cvs Module name: src Changes by: patr...@cvs.openbsd.org 2017/11/08 02:33:37
Modified files: usr.sbin/ikectl: ikeca.c Log message: Since r1.41 the extensions are included in the CSR. Thus ca_request() already sets the extension values and returns. ca_sign() re-uses the information to write out the extension file. Since ca_request() uses strings stored on the stack, on return the pointers to those strings will be unusable. To fix this, strdup() the strings passed ca_setenv() so we can re-use them in another scope. And free() them when we clear the environment in ca_clrenv(). Initial report and diff from Andrei-Marius Radu. ok markus@