Fix use after free:

https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest https://rt.openssl.org/Ticket/Display.html?id=3265&user=guest&pass=guest
2014-04-13 13:14:15 +00:00 · 2014-04-13 13:14:15 +00:00 · 645afb65f7
commit 645afb65f7
parent b2dc35d4a2
1 changed files with 2 additions and 1 deletions
--- a/crypto/external/bsd/openssl/dist/ssl/s3_pkt.c
+++ b/crypto/external/bsd/openssl/dist/ssl/s3_pkt.c
@ -1057,7 +1057,8 @@ start:
 				s->rstate=SSL_ST_READ_HEADER;
 				rr->off=0;
 				if (s->mode & SSL_MODE_RELEASE_BUFFERS)
-					ssl3_release_read_buffer(s);
+					if (s->s3->rbuf.left == 0) /* no read-ahead left? */
+						ssl3_release_read_buffer(s);
 				}
 			}
 		return(n);