From 25dab5b4c1779c970f3c644ff3f37f0c4cb5538d Mon Sep 17 00:00:00 2001
From: simon <simon@FreeBSD.org>
Date: Sun, 1 Oct 2006 08:09:46 +0000
Subject: Import from upstream OpenSSL 0.9.8 branch:

Fix uninitialized free of ctx in compute_key() when the
OPENSSL_DH_MAX_MODULUS_BITS check is triggered.

This fixes the same issue as FreeBSD-SA-06:23.openssl v1.1.
---
 crypto/openssl/crypto/dh/dh_key.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'crypto')

diff --git a/crypto/openssl/crypto/dh/dh_key.c b/crypto/openssl/crypto/dh/dh_key.c
index cb5abdc..37a2c1b 100644
--- a/crypto/openssl/crypto/dh/dh_key.c
+++ b/crypto/openssl/crypto/dh/dh_key.c
@@ -173,7 +173,7 @@ err:
 
 static int compute_key(unsigned char *key, const BIGNUM *pub_key, DH *dh)
 	{
-	BN_CTX *ctx;
+	BN_CTX *ctx=NULL;
 	BN_MONT_CTX *mont=NULL;
 	BIGNUM *tmp;
 	int ret= -1;
-- 
cgit v1.1