mirror of
git://git.gnupg.org/gnupg.git
synced 2025-07-02 22:46:30 +02:00
dirmngr,gpgsm: Return NULL on fail
* dirmngr/ldapserver.c (ldapserver_parse_one): Set SERVER to NULL. * sm/gpgsm.c (parse_keyserver_line): Ditto. -- Reported-by: Joshua Rogers <git@internot.info> "If something inside the ldapserver_parse_one function failed, 'server' would be freed, then returned, leading to a use-after-free. This code is likely copied from sm/gpgsm.c, which was also susceptible to this bug." Signed-off-by: Werner Koch <wk@gnupg.org>
This commit is contained in:
parent
bdc8efbdd1
commit
abd5f6752d
2 changed files with 2 additions and 0 deletions
|
@ -862,6 +862,7 @@ parse_keyserver_line (char *line,
|
|||
{
|
||||
log_info (_("%s:%u: skipping this line\n"), filename, lineno);
|
||||
keyserver_list_free (server);
|
||||
server = NULL;
|
||||
}
|
||||
|
||||
return server;
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue