From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: =?utf-8?b?VG9tw6HFoSBNcsOheiA8dG1yYXpAZmVkb3JhcHJvamVjdC5vcmc+?= To: git-commits@fedoraproject.org Subject: [rpms/openssl] rebase_40beta: - fix use of freed memory if SSL_CTX_free() is called before SSL_free() Date: Tue, 09 Jun 2026 12:41:54 GMT Message-ID: <178100891488.1.6321481808031278354.rpms-openssl-a650e4abcbfc@fedoraproject.org> List-ID: X-Git-Repo: rpms/openssl X-Git-Branch: rebase_40beta X-Git-Rev: a650e4abcbfc71c7aee6a0cae06c38544e36342e ICAgICAgICBBIG5ldyBjb21taXQgaGFzIGJlZW4gcHVzaGVkLgoKICAgICAgICBSZXBvICAgOiBy cG1zL29wZW5zc2wKICAgICAgICBCcmFuY2ggOiByZWJhc2VfNDBiZXRhCiAgICAgICAgQ29tbWl0 IDogYTY1MGU0YWJjYmZjNzFjN2FlZTZhMGNhZTA2YzM4NTQ0ZTM2MzQyZQogICAgICAgIEF1dGhv ciA6IFRvbcOhxaEgTXLDoXogPHRtcmF6QGZlZG9yYXByb2plY3Qub3JnPgogICAgICAgIERhdGUg ICA6IDIwMDktMTAtMTZUMTE6NDA6MjcrMDA6MDAKICAgICAgICBTdGF0cyAgOiArMzgvLTEgaW4g MiBmaWxlKHMpCiAgICAgICAgVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcv cnBtcy9vcGVuc3NsL2MvYTY1MGU0YWJjYmZjNzFjN2FlZTZhMGNhZTA2YzM4NTQ0ZTM2MzQyZT9i cmFuY2g9cmViYXNlXzQwYmV0YQoKICAgICAgICBMb2c6CiAgICAgICAgLSBmaXggdXNlIG9mIGZy ZWVkIG1lbW9yeSBpZiBTU0xfQ1RYX2ZyZWUoKSBpcyBjYWxsZWQgYmVmb3JlIFNTTF9mcmVlKCkK KCM1MjEzNDIpCgotLS0KZGlmZiAtLWdpdCBhL29wZW5zc2wtMS4wLjAtYmV0YTMtc3NsLWZyZWUu cGF0Y2ggYi9vcGVuc3NsLTEuMC4wLWJldGEzLXNzbC1mcmVlLnBhdGNoCm5ldyBmaWxlIG1vZGUg MTAwNjQ0CmluZGV4IDAwMDAwMDAuLjYxZjU2ZWEKLS0tIC9kZXYvbnVsbAorKysgYi9vcGVuc3Ns LTEuMC4wLWJldGEzLXNzbC1mcmVlLnBhdGNoCkBAIC0wLDAgKzEsMzEgQEAKK2RpZmYgLXVwIG9w ZW5zc2wtMS4wLjAtYmV0YTMvc3NsL3NzbF9saWIuYy5jdHgtZnJlZSBvcGVuc3NsLTEuMC4wLWJl dGEzL3NzbC9zc2xfbGliLmMKKy0tLSBvcGVuc3NsLTEuMC4wLWJldGEzL3NzbC9zc2xfbGliLmMu Y3R4LWZyZWUJMjAwOS0xMC0wOCAyMDo0NDoyNi4wMDAwMDAwMDAgKzAyMDAKKysrKyBvcGVuc3Ns LTEuMC4wLWJldGEzL3NzbC9zc2xfbGliLmMJMjAwOS0xMC0xNiAxMTo1Njo1My4wMDAwMDAwMDAg KzAyMDAKK0BAIC01NTYsNyArNTU2LDYgQEAgdm9pZCBTU0xfZnJlZShTU0wgKnMpCisgCWlmIChz LT5jZXJ0ICE9IE5VTEwpIHNzbF9jZXJ0X2ZyZWUocy0+Y2VydCk7CisgCS8qIEZyZWUgdXAgaWYg YWxsb2NhdGVkICovCisgCistCWlmIChzLT5jdHgpIFNTTF9DVFhfZnJlZShzLT5jdHgpOworICNp Zm5kZWYgT1BFTlNTTF9OT19UTFNFWFQKKyAJaWYgKHMtPnRsc2V4dF9ob3N0bmFtZSkKKyAJCU9Q RU5TU0xfZnJlZShzLT50bHNleHRfaG9zdG5hbWUpOworQEAgLTU4MCw2ICs1NzksOCBAQCB2b2lk IFNTTF9mcmVlKFNTTCAqcykKKyAKKyAJaWYgKHMtPm1ldGhvZCAhPSBOVUxMKSBzLT5tZXRob2Qt PnNzbF9mcmVlKHMpOworIAorKwlpZiAocy0+Y3R4KSBTU0xfQ1RYX2ZyZWUocy0+Y3R4KTsKKysK KyAjaWZuZGVmCU9QRU5TU0xfTk9fS1JCNQorIAlpZiAocy0+a3NzbF9jdHggIT0gTlVMTCkKKyAJ CWtzc2xfY3R4X2ZyZWUocy0+a3NzbF9jdHgpOworZGlmZiAtdXAgb3BlbnNzbC0xLjAuMC1iZXRh My9zc2wvczNfbGliLmMuaGJ1Zi1jbGVhciBvcGVuc3NsLTEuMC4wLWJldGEzL3NzbC9zM19saWIu YworLS0tIG9wZW5zc2wtMS4wLjAtYmV0YTMvc3NsL3MzX2xpYi5jLmhidWYtY2xlYXIJMjAwOS0w NS0yOCAyMDoxMDo0Ny4wMDAwMDAwMDAgKzAyMDAKKysrKyBvcGVuc3NsLTEuMC4wLWJldGEzL3Nz bC9zM19saWIuYwkyMDA5LTEwLTE2IDA5OjUwOjI0LjAwMDAwMDAwMCArMDIwMAorQEAgLTIyMTEs NiArMjIxMSw3IEBAIHZvaWQgc3NsM19jbGVhcihTU0wgKnMpCisgIAl3bGVuID0gcy0+czMtPndi dWYubGVuOworIAlpZiAocy0+czMtPmhhbmRzaGFrZV9idWZmZXIpIHsKKyAJCUJJT19mcmVlKHMt PnMzLT5oYW5kc2hha2VfYnVmZmVyKTsKKysJCXMtPnMzLT5oYW5kc2hha2VfYnVmZmVyID0gTlVM TDsKKyAJfQorIAlpZiAocy0+czMtPmhhbmRzaGFrZV9kZ3N0KSB7CisgCQlzc2wzX2ZyZWVfZGln ZXN0X2xpc3Qocyk7CgpkaWZmIC0tZ2l0IGEvb3BlbnNzbC5zcGVjIGIvb3BlbnNzbC5zcGVjCmlu ZGV4IGZmMzE3NmEuLjE0MTJjODYgMTAwNjQ0Ci0tLSBhL29wZW5zc2wuc3BlYworKysgYi9vcGVu c3NsLnNwZWMKQEAgLTIzLDcgKzIzLDcgQEAKIFN1bW1hcnk6IEEgZ2VuZXJhbCBwdXJwb3NlIGNy eXB0b2dyYXBoeSBsaWJyYXJ5IHdpdGggVExTIGltcGxlbWVudGF0aW9uCiBOYW1lOiBvcGVuc3Ns CiBWZXJzaW9uOiAxLjAuMAotUmVsZWFzZTogMC45LiV7YmV0YX0lez9kaXN0fQorUmVsZWFzZTog MC4xMC4le2JldGF9JXs/ZGlzdH0KICMgV2UgcmVtb3ZlIGNlcnRhaW4gcGF0ZW50ZWQgYWxnb3Jp dGhtcyBmcm9tIHRoZSBvcGVuc3NsIHNvdXJjZSB0YXJiYWxsCiAjIHdpdGggdGhlIGhvYmJsZS1v cGVuc3NsIHNjcmlwdCB3aGljaCBpcyBpbmNsdWRlZCBiZWxvdy4KIFNvdXJjZTogb3BlbnNzbC0l e3ZlcnNpb259LSV7YmV0YX0tdXNhLnRhci5iejIKQEAgLTY5LDYgKzY5LDcgQEAgUGF0Y2g2MTog b3BlbnNzbC0xLjAuMC1iZXRhMy1uYW1pbmdibGsucGF0Y2gKIFBhdGNoNjI6IG9wZW5zc2wtMS4w LjAtYmV0YTMtY2FtZWxsaWEtcm91bmRzLnBhdGNoCiBQYXRjaDYzOiBvcGVuc3NsLTEuMC4wLWJl dGEzLWR0bHMxLWZpeC5wYXRjaAogUGF0Y2g2NDogb3BlbnNzbC0xLjAuMC1iZXRhMy1zc2wtc2Vz c2lvbi5wYXRjaAorUGF0Y2g2NTogb3BlbnNzbC0xLjAuMC1iZXRhMy1zc2wtZnJlZS5wYXRjaAog CiBMaWNlbnNlOiBPcGVuU1NMCiBHcm91cDogU3lzdGVtIEVudmlyb25tZW50L0xpYnJhcmllcwpA QCAtMTU1LDYgKzE1Niw3IEBAIGZyb20gb3RoZXIgZm9ybWF0cyB0byB0aGUgZm9ybWF0cyB1c2Vk IGJ5IHRoZSBPcGVuU1NMIHRvb2xraXQuCiAlcGF0Y2g2MiAtcDEgLWIgLmNtbGwtcm91bmRzCiAl cGF0Y2g2MyAtcDEgLWIgLmR0bHMxLWZpeAogJXBhdGNoNjQgLXAxIC1iIC5zc2wtc2Vzc2lvbgor JXBhdGNoNjUgLXAxIC1iIC5zc2wtZnJlZQogCiAjIE1vZGlmeSB0aGUgdmFyaW91cyBwZXJsIHNj cmlwdHMgdG8gcmVmZXJlbmNlIHBlcmwgaW4gdGhlIHJpZ2h0IGxvY2F0aW9uLgogcGVybCB1dGls L3BlcmxwYXRoLnBsIGBkaXJuYW1lICV7X19wZXJsfWAKQEAgLTQwMyw2ICs0MDUsMTAgQEAgcm0g LXJmICRSUE1fQlVJTERfUk9PVC8le19saWJkaXJ9L2ZpcHNjYW5pc3Rlci4qCiAlcG9zdHVuIC1w IC9zYmluL2xkY29uZmlnCiAKICVjaGFuZ2Vsb2cKKyogRnJpIE9jdCAxNiAyMDA5IFRvbWFzIE1y YXogPHRtcmF6QHJlZGhhdC5jb20+IDEuMC4wLTAuMTAuYmV0YTMKKy0gZml4IHVzZSBvZiBmcmVl ZCBtZW1vcnkgaWYgU1NMX0NUWF9mcmVlKCkgaXMgY2FsbGVkIGJlZm9yZQorICBTU0xfZnJlZSgp ICgjNTIxMzQyKQorCiAqIFRodSBPY3QgIDggMjAwOSBUb21hcyBNcmF6IDx0bXJhekByZWRoYXQu Y29tPiAxLjAuMC0wLjkuYmV0YTMKIC0gZml4IHR5cG8gaW4gRFRMUzEgY29kZSAoIzUyNzAxNSkK IC0gZml4IGxlYWsgaW4gZXJyb3IgaGFuZGxpbmcgb2YgZDJpX1NTTF9TRVNTSU9OKCkK