Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fix unlikely double free in PKINIT client code
In pa_pkinit_gen_req, if the cleanup handler is reached with non-zero retval and non-null out_data, out_data is freed, then dereferenced, then freed again. This can only happen if one of the small fixed-size malloc requests fails after pkinit_as_req_create succeeds, so it is unlikely to occur in practice. (cherry picked from commit cc002d6) ticket: 7878 version_fixed: 1.12.2 status: resolved
- Loading branch information