DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

curl: Don't free memory for subjectAltName before calling callback

Browse source 
Freeing memory for subjectAltName in parse_cert(), will give cert_cb
pointers to freed memory zone that may already been overwritten. Memory
for subjectAltName is released in parse_cert_free().

Signed-off-by: Cedric Izoard <cedric.izoard@ceva-dsp.com>
This commit is contained in:
Cedric Izoard 2016-06-14 12:49:00 +00:00 committed by Jouni Malinen
parent 1f7cd73ca6
commit 04c18fa04b
1 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/utils/http_curl.c
View file

@ -857,10 +857,8 @@ static void parse_cert(struct http_ctx *ctx, struct http_cert *hcert,
os_memset(hcert, 0, sizeof(*hcert)); os_memset(hcert, 0, sizeof(*hcert));
*names = X509_get_ext_d2i(cert, NID_subject_alt_name, NULL, NULL); *names = X509_get_ext_d2i(cert, NID_subject_alt_name, NULL, NULL);
if (*names) { if (*names)
add_alt_names(ctx, hcert, *names); add_alt_names(ctx, hcert, *names);
sk_GENERAL_NAME_pop_free(*names, GENERAL_NAME_free);
}
add_logotype_ext(ctx, hcert, cert); add_logotype_ext(ctx, hcert, cert);
} }