Blame SOURCES/openssl-1.0.1e-cve-2015-0209.patch

96beb5
diff -up openssl-1.0.1e/crypto/ec/ec_asn1.c.use-after-free openssl-1.0.1e/crypto/ec/ec_asn1.c
96beb5
--- openssl-1.0.1e/crypto/ec/ec_asn1.c.use-after-free	2015-03-18 13:13:30.221429895 +0100
96beb5
+++ openssl-1.0.1e/crypto/ec/ec_asn1.c	2015-03-18 13:22:45.165361144 +0100
96beb5
@@ -1140,8 +1140,6 @@ EC_KEY *d2i_ECPrivateKey(EC_KEY **a, con
96beb5
                                  ERR_R_MALLOC_FAILURE);
96beb5
 			goto err;
96beb5
 			}
96beb5
-		if (a)
96beb5
-			*a = ret;
96beb5
 		}
96beb5
 	else
96beb5
 		ret = *a;
96beb5
@@ -1206,11 +1204,13 @@ EC_KEY *d2i_ECPrivateKey(EC_KEY **a, con
96beb5
 			}
96beb5
 		}
96beb5
 
96beb5
+	if (a)
96beb5
+		*a = ret;
96beb5
 	ok = 1;
96beb5
 err:
96beb5
 	if (!ok)
96beb5
 		{
96beb5
-		if (ret)
96beb5
+		if (ret && (a == NULL || *a != ret))
96beb5
 			EC_KEY_free(ret);
96beb5
 		ret = NULL;
96beb5
 		}