jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

DPP2: Fix error path handling in enterprise provisioning

Browse source 
The allocated memory pointed by the pem pointer was freed on an error
path without clearing the pointer to NULL before returning it from the
function. This could have resulted in use of freed memory in an error
case. Fix this by clearing the pointer so that the function returns NULL
properly in the case of this error.

Fixes: ace3723d98 ("DPP2: Enterprise provisioning (Enrollee)")
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
This commit is contained in:
Jouni Malinen 2020-11-02 16:52:01 +02:00 committed by Jouni Malinen
parent f724dd1bfd
commit 3d490296bc
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/common/dpp_crypto.c
View file

@ -2868,6 +2868,7 @@ struct wpabuf * dpp_pkcs7_certs(const struct wpabuf *pkcs7)
res = BIO_read(out, wpabuf_put(pem, 0), rlen); res = BIO_read(out, wpabuf_put(pem, 0), rlen);
if (res <= 0) { if (res <= 0) {
wpabuf_free(pem); wpabuf_free(pem);
pem = NULL;
goto fail; goto fail;
} }
wpabuf_put(pem, res); wpabuf_put(pem, res);