From bb68864bf05d29df644427ec841bc3db6a336519 Mon Sep 17 00:00:00 2001 From: Petr Mensik Date: Tue, 20 Sep 2022 11:22:47 +0200 Subject: [PATCH] Fix CVE-2022-38178 5962. [security] Fix memory leak in EdDSA verify processing. (CVE-2022-38178) [GL #3487] --- lib/dns/openssleddsa_link.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/dns/openssleddsa_link.c b/lib/dns/openssleddsa_link.c index 8b115ec..4f3c2a8 100644 --- a/lib/dns/openssleddsa_link.c +++ b/lib/dns/openssleddsa_link.c @@ -325,7 +325,7 @@ openssleddsa_verify(dst_context_t *dctx, const isc_region_t *sig) { siglen = DNS_SIG_ED448SIZE; if (sig->length != siglen) - return (DST_R_VERIFYFAILURE); + DST_RET(DST_R_VERIFYFAILURE); isc_buffer_usedregion(buf, &tbsreg); -- 2.37.3