From a227ff336fc934b4a52c4659ae423dfa10efd5f3 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Fri, 14 May 2021 15:33:40 +0100 Subject: Fix a use-after-free in the child provider code If the child provider context data gets cleaned up before all usage of providers has finished then a use-after-free can occur. We change the priority of this data so that it gets freed later. Fixes #15284 Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/15286) --- include/internal/cryptlib.h | 1 + 1 file changed, 1 insertion(+) (limited to 'include') diff --git a/include/internal/cryptlib.h b/include/internal/cryptlib.h index d943419a52..966c8f26f1 100644 --- a/include/internal/cryptlib.h +++ b/include/internal/cryptlib.h @@ -168,6 +168,7 @@ typedef struct ossl_ex_data_global_st { # define OSSL_LIB_CTX_CHILD_PROVIDER_INDEX 18 # define OSSL_LIB_CTX_MAX_INDEXES 19 +# define OSSL_LIB_CTX_METHOD_LOW_PRIORITY -1 # define OSSL_LIB_CTX_METHOD_DEFAULT_PRIORITY 0 # define OSSL_LIB_CTX_METHOD_PRIORITY_1 1 # define OSSL_LIB_CTX_METHOD_PRIORITY_2 2 -- cgit v1.2.3