[openssl/openssl] 0c1e2d: Fix ASN1_TYPE memory leak in asn1_multi()
"'Adam Tabak' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/openssl-3.5/[email protected]> |
Branch: refs/heads/openssl-3.5
Home: https://github.com/openssl/openssl
Commit: 0c1e2d98eab6d6409f46b67cf43fa1a4555bb5c8
https://github.com/openssl/openssl/commit/0c1e2d98eab6d6409f46b67cf43fa1a4555bb5c8
Author: Greensi7 <[email protected]>
Date: 2026-08-14 (Fri, 14 Aug 2026)
Changed paths:
M crypto/asn1/asn1_gen.c
Log Message:
-----------
Fix ASN1_TYPE memory leak in asn1_multi()
In asn1_gen.c `asn1_multi()` function variable allocated as
`ASN1_TYPE *typ = generate_v3()` is not freed if
`if (!sk_ASN1_TYPE_push(sk, typ))` branch fails.
Bug found by x509v3 fuzzer MFAIL test.
Example input:
```
[default]
1.2.3.4 = ASN1:SEQUENCE:items
[items]
value = INTEGER:1
```
Reviewed-by: Eugene Syromiatnikov <[email protected]>
Reviewed-by: Milan Broz <[email protected]>
Reviewed-by: Nikola Pajkovsky <[email protected]>
Merge-date: Fri Aug 14 10:15:34 2026
Merged-from: https://github.com/openssl/openssl/pull/32206
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.5/57b84e-0c1e2d%40github.com.