curl-library
[PATCH] Missing allocation failure check in ssluse.c (BIO_new)
From: Andre Guibert de Bruet <andy_at_siliconlandmark.com>
Date: Wed, 4 Mar 2009 22:41:05 -0500
Received on 2009-03-05
Date: Wed, 4 Mar 2009 22:41:05 -0500
Hi,
While hardening a libcurl-using application that I wrote, I came
across a code segment in ssluse.c where the allocation of the memory
BIO was not being properly checked.
Please commit the attached patch upon review.
Cheers,
/* Andre Guibert de Bruet * 436f 6465 2070 6f65 742e 2042 6974 206a */
/* Managing Partner * 6f63 6b65 792e 2053 7973 4164 6d69 6e2e */
/* GSM: +1 734 846 8758 * 2055 4e49 5820 736c 6575 7468 2e00 0000 */
/* WWW: siliconlandmark.com * C/C++, Java, Perl, PHP, SQL, XHTML, XML */
- application/octet-stream attachment: openssl.bio.check.diff