[openssl/openssl] d9f5cb: Fix ASN1_TYPE memory leak in asn1_multi()

"'Adam Tabak' via openssl-commits" <[email protected]>
Newsgroups gmane.comp.encryption.openssl.cvs
Message-ID <openssl/openssl/push/refs/heads/master/[email protected]>
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: d9f5cb8965cb56414b97a95a101dc68e08f26476
      https://github.com/openssl/openssl/commit/d9f5cb8965cb56414b97a95a101dc68e08f26476
  Author: Greensi7 <[email protected]>
  Date:   2026-08-14 (Fri, 14 Aug 2026)

  Changed paths:
    M crypto/asn1/asn1_gen.c

  Log Message:
  -----------
  Fix ASN1_TYPE memory leak in asn1_multi()

In asn1_gen.c `asn1_multi()` function variable allocated as
`ASN1_TYPE *typ = generate_v3()` is not freed if
`if (!sk_ASN1_TYPE_push(sk, typ))` branch fails.

Bug found by x509v3 fuzzer MFAIL test.
Example input:
```
[default]
1.2.3.4 = ASN1:SEQUENCE:items

[items]
value = INTEGER:1
```

Reviewed-by: Eugene Syromiatnikov <[email protected]>
Reviewed-by: Milan Broz <[email protected]>
Reviewed-by: Nikola Pajkovsky <[email protected]>
Merge-date: Fri Aug 14 09:42:52 2026
Merged-from: https://github.com/openssl/openssl/pull/32206



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/de80bb-d9f5cb%40github.com.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.