search

dsully / perl-crypt-openssl-x509

Perl interface to OpenSSL's X509 module.
Other
25 stars 33 forks source link

BIO double free in CRL_Issuer #73

Closed manison closed 4 years ago

manison commented 5 years ago

This line

https://github.com/dsully/perl-crypt-openssl-x509/blob/91fbfceb5e3c31ca179be933cc1b653ed0a01900/X509.xs#L1588

causes the BIO to be freed twice which may result in segmentation fault.

jonasbn commented 4 years ago

Is this due to the same thing happening in line 1600 ?

manison commented 4 years ago

Is this due to the same thing happening in line 1600 ?

Yes, first free is at line 1588 and second at line 1600.

jonasbn commented 4 years ago

Addressed in release 1.9.2 (1.902)

jonasbn commented 4 years ago

Thanks @manison