mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-11-09 23:00:03 +08:00
7 lines
327 B
Plaintext
7 lines
327 B
Plaintext
Security
|
|
* Fix a use-after-free/double-free risk in mbedtls_pkcs7_free() when reusing
|
|
an mbedtls_pkcs7 context across parse -> free -> parse -> free cycles. The
|
|
function now resets the context after freeing it, ensuring stale
|
|
signed_data.signers.next pointers cannot be walked by a later free
|
|
operation.
|