mirror of
https://github.com/openssl/openssl.git
synced 2025-01-18 13:44:20 +08:00
crypto/asn1/a_time.c: Add check for OPENSSL_malloc
As the potential failure of the OPENSSL_malloc(), timestamp_tm could be NULL and be used in ASN1_TIME_to_tm() without check. Therefore, it should be better to check the return value of OPENSSL_malloc() and return error if fails. Signed-off-by: Jiasheng Jiang <jiasheng@iscas.ac.cn> Reviewed-by: Todd Short <todd.short@me.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/18575)
This commit is contained in:
parent
93ed4b5fb4
commit
8547cd6790
@ -618,7 +618,10 @@ time_t asn1_string_to_time_t(const char *asn1_string)
|
||||
}
|
||||
|
||||
timestamp_tm = OPENSSL_malloc(sizeof(*timestamp_tm));
|
||||
|
||||
if (timestamp_tm == NULL) {
|
||||
ASN1_TIME_free(timestamp_asn1);
|
||||
return -1;
|
||||
}
|
||||
if (!(ASN1_TIME_to_tm(timestamp_asn1, timestamp_tm))) {
|
||||
OPENSSL_free(timestamp_tm);
|
||||
ASN1_TIME_free(timestamp_asn1);
|
||||
|
Loading…
Reference in New Issue
Block a user