diff options
author | Kamil Dudka <kdudka@redhat.com> | 2012-12-03 13:17:50 +0100 |
---|---|---|
committer | Kamil Dudka <kdudka@redhat.com> | 2012-12-03 13:34:36 +0100 |
commit | 68d2830ee9df50961e481e81c1baaa290c33f03e (patch) | |
tree | 51712227f97f4072ed44d99b01eaa1dcea3df28d /acinclude.m4 | |
parent | 2ecdd486837d47eafb9861ea48519ed3b57d667b (diff) | |
download | curl-68d2830ee9df50961e481e81c1baaa290c33f03e.tar.gz |
nss: prevent NSS from crashing on client auth hook failure
Although it is not explicitly stated in the documentation, NSS uses
*pRetCert and *pRetKey even if the client authentication hook returns
a failure. Namely, if we destroy *pRetCert without clearing *pRetCert
afterwards, NSS destroys the certificate once again, which causes a
double free.
Reported by: Bob Relyea
Diffstat (limited to 'acinclude.m4')
0 files changed, 0 insertions, 0 deletions