From 55093592b4f5dd3dd9d96b986c55e4974a7af1c6 Mon Sep 17 00:00:00 2001 From: Rainer Gerhards Date: Tue, 23 Apr 2013 18:47:58 +0200 Subject: bugfix: potential segfault in guardtime signature provider it could segfault if an error was reported by the GuardTime API, because an invalid free could happen then --- ChangeLog | 5 +++++ runtime/librsgt.c | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 696e6397..8e4eebe7 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,9 @@ --------------------------------------------------------------------------- +Version 7.3.12 [devel] 2013-04-?? +- bugfix: potential segfault in guardtime signature provider + it could segfault if an error was reported by the GuardTime API, because + an invalid free could happen then +--------------------------------------------------------------------------- Version 7.3.11 [devel] 2013-04-23 - added support for encrypting log files - omhiredis: added support for redis pipeline support diff --git a/runtime/librsgt.c b/runtime/librsgt.c index afafe2f2..2127e306 100644 --- a/runtime/librsgt.c +++ b/runtime/librsgt.c @@ -775,7 +775,7 @@ done: static int timestampIt(gtfile gf, GTDataHash *hash) { - unsigned char *der; + unsigned char *der = NULL; size_t lenDer; int r = GT_OK; int ret = 0; -- cgit v1.2.3