mirrors
/
FreeRDP
mirror of https://github.com/FreeRDP/FreeRDP
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

core: Fix pointer corruption with d2i_X509 

The `d2i_X509` function manipulates the passed pointer on success. This
resulted in a corrupted `rdpCertBlob` struct, crashing later on free.
This commit is contained in:
Martin Fleisz 2023-02-14 09:16:02 +01:00 committed by akallabeth
parent ff3c7c82ee
commit 5f9db5a89c
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
libfreerdp/crypto/certificate.c
View File

@ -285,7 +285,8 @@ static BOOL is_rsa_key(const X509* x509)
static BOOL blob_is_rsa_key(const rdpCertBlob* cert)
{
X509* x509 = d2i_X509(NULL, &cert->data, cert->length);
const BYTE* inData = cert->data;
X509* x509 = d2i_X509(NULL, &inData, cert->length);
if (!x509)
return FALSE;