Open
Bug 668942
Opened 15 years ago
Updated 2 years ago
libpkix certificate memory leak in OCSP response processing
Categories
(NSS :: Libraries, defect, P5)
NSS
Libraries
Tracking
(Not tracked)
NEW
People
(Reporter: briansmith, Unassigned)
Details
in pkix_pl_OcspResponse_VerifySignature:
> if (signature->wasChecked) {
> if (signature->status == SECSuccess) {
> response->signerCert =
> CERT_DupCertificate(signature->cert);
> } else { ... }
> }
>
> response->signerCert =
> ocsp_GetSignerCertificate(response->handle, tbsData,
signature, issuerCert);
notice that response->signerCert is assigned twice, without a call to CERT_DestroyCertificate in between.
|
||
Updated•4 years ago
|
Severity: normal → S3
|
||
Updated•2 years ago
|
Severity: S3 → S4
Priority: -- → P5
You need to log in
before you can comment on or make changes to this bug.
Description
•