From 34d2040de94061fa2edc4dbbfbf6d5280d33bf25 Mon Sep 17 00:00:00 2001 From: Jannis Voelker Date: Thu, 13 Aug 2020 12:43:33 +0200 Subject: [PATCH] Fix segfault in ua_pki_openssl.c If the value is not set to NULL, a heap-use-after-free occurs in UA_CertificateVerification_clear(). --- plugins/securityPolicies/openssl/ua_pki_openssl.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/plugins/securityPolicies/openssl/ua_pki_openssl.c b/plugins/securityPolicies/openssl/ua_pki_openssl.c index ba74eaaa2..ee4616b57 100755 --- a/plugins/securityPolicies/openssl/ua_pki_openssl.c +++ b/plugins/securityPolicies/openssl/ua_pki_openssl.c @@ -78,6 +78,8 @@ UA_CertificateVerification_clear (UA_CertificateVerification * cv) { UA_CertContext_sk_free (context); UA_free (context); + cv->context = NULL; + return; }