geos_one/bongo
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases 1 Wiki Activity

-- fix: a potential DOS where connio would segfault on the following command sequence (pop connect) stls \n quit \n due to an attempt to free 0x0

Browse Source
This commit is contained in:
pfelt
2009-08-26 03:50:40 +00:00
parent 64d3ad196a
commit 69d1290104
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libs/connio/connio.c
+8 -4
View File
@@ -447,11 +447,15 @@ ConnNegotiate(Connection *conn, bongo_ssl_context *context)
CONN_TRACE_EVENT(c, CONN_TRACE_EVENT_SSL_CONNECT);
return(TRUE);
}
gnutls_deinit(c->ssl.context);
gnutls_certificate_free_credentials(c->ssl.credentials);
if (c->ssl.context) {
gnutls_deinit(c->ssl.context);
c->ssl.context = NULL;
}
if (c->ssl.credentials) {
gnutls_certificate_free_credentials(c->ssl.credentials);
c->ssl.credentials = NULL;
}
c->ssl.enable = FALSE;
c->ssl.context = NULL;
c->ssl.credentials = NULL;
}
return(FALSE);