summaryrefslogtreecommitdiffstats
path: root/kexdh.c
diff options
context:
space:
mode:
authordjm@openbsd.org <djm@openbsd.org>2020-12-04 02:29:25 +0000
committerDamien Miller <djm@mindrot.org>2020-12-04 13:43:01 +1100
commit3b98b6e27f8a122dbfda9966b1afeb3e371cce91 (patch)
treebf884ec232f2460313632e4f7c88b45e01f7bc7a /kexdh.c
parent553b90feedd7da5b90901d73005f86705456d686 (diff)
upstream: memleak of DH public bignum; found with libfuzzer
Diffstat (limited to 'kexdh.c')
-rw-r--r--kexdh.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/kexdh.c b/kexdh.c
index 6e0159f9..001dd12d 100644
--- a/kexdh.c
+++ b/kexdh.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: kexdh.c,v 1.33 2020/05/08 05:13:14 djm Exp $ */
+/* $OpenBSD: kexdh.c,v 1.34 2020/12/04 02:29:25 djm Exp $ */
/*
* Copyright (c) 2019 Markus Friedl. All rights reserved.
*
@@ -194,6 +194,7 @@ kex_dh_dec(struct kex *kex, const struct sshbuf *dh_blob,
*shared_secretp = buf;
buf = NULL;
out:
+ BN_free(dh_pub);
DH_free(kex->dh);
kex->dh = NULL;
sshbuf_free(buf);