File openssl-CVE-2015-1792.patch of Package compat-openssl098.1637
commit 92f9a8bf3844359bb50d86dab92bc24b074d350d
Author: Dr. Stephen Henson <steve@openssl.org>
Date: Fri Jun 5 12:11:25 2015 +0100
Fix infinite loop in CMS
Fix loop in do_free_upto if cmsbio is NULL: this will happen when attempting
to verify and a digest is not recognised. Reported by Johannes Bauer.
CVE-2015-1792
Reviewed-by: Matt Caswell <matt@openssl.org>
Index: openssl-0.9.8j/crypto/cms/cms_smime.c
===================================================================
--- openssl-0.9.8j.orig/crypto/cms/cms_smime.c 2015-06-12 17:12:06.305161154 +0200
+++ openssl-0.9.8j/crypto/cms/cms_smime.c 2015-06-12 17:12:30.846478535 +0200
@@ -141,7 +141,7 @@ static void do_free_upto(BIO *f, BIO *up
BIO_free(f);
f = tbio;
}
- while (f != upto);
+ while (f && f != upto);
}
else
BIO_free_all(f);