[openssl-dev] [openssl.org #3782] bug/leak in crypto/ec/ecp_smpl.c

[Salz, Rich via RT]

around line 135.  The old code has a memory leak, only freeing the BN if
it's NULL.

- if (!group->field)
-     BN_free(group->field);
- if (!group->a)
-     BN_free(group->a);
- if (!group->b)
-     BN_free(group->b);
+ BN_free(group->field);
+ BN_free(group->a);
+ BN_free(group->b);
.


_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev