mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-10-27 02:53:35 +00:00
@@ -1,4 +1,6 @@
|
|||||||
Security
|
Security
|
||||||
* Fix a use-after-free/double-free risk in mbedtls_pkcs7_free() when reusing an mbedtls_pkcs7 context
|
* Fix a use-after-free/double-free risk in mbedtls_pkcs7_free() when reusing
|
||||||
across parse -> free -> parse -> free cycles. The function now resets the context after freeing it,
|
an mbedtls_pkcs7 context across parse -> free -> parse -> free cycles. The
|
||||||
ensuring stale signed_data.signers.next pointers cannot be walked by a later free operation.
|
function now resets the context after freeing it, ensuring stale
|
||||||
|
signed_data.signers.next pointers cannot be walked by a later free
|
||||||
|
operation.
|
||||||
|
|||||||
Reference in New Issue
Block a user