zhaozg / lua-openssl / 22257086556

94%

push

travis-ci

asn1: fix uaf/double free and memory leak in d2i

d2i functions may return a different pointer than their input.
Specifically, in LibreSSL, the input is always freed and a new object is
always returned.

In the original code, the userdata pointer was not updated, leading to
use-after-free and double-free on garbage collection. The previous fix
attempted to update the pointer but failed to free the old object,
causing a memory leak.

This patch properly updates the userdata with the new object and frees
the old one, eliminating both the UAF/double free and the memory leak.

Signed-off-by: mischief <mischief@offblast.org>

6 of 6 new or added lines in 1 file covered. (100.0%)

10547 of 11232 relevant lines covered (93.9%)

1971.43 hits per line