commit 9f5a3c4a0ae949fa8c0ca969e4af600bb0ed8555
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Sat Sep 07 18:09:43 2013 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Sun Sep 08 20:08:59 2013 +0200
tree 552d2978c57ba5222216a82869f4ee62388f6c2f
parent bfb355c33bb0cbcbb7781044dba995c5bf301e78

Fix possible memory error.

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 5bedcad..7608d78 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -134,7 +134,7 @@
         if( p + cert_len > end )
             return( POLARSSL_ERR_SSL_BAD_INPUT_DATA );
 
-        session->peer_cert = polarssl_malloc( cert_len );
+        session->peer_cert = polarssl_malloc( sizeof( x509_cert ) );
 
         if( session->peer_cert == NULL )
             return( POLARSSL_ERR_SSL_MALLOC_FAILED );
@@ -143,8 +143,8 @@
 
         if( ( ret = x509parse_crt( session->peer_cert, p, cert_len ) ) != 0 )
         {
+            x509_free( session->peer_cert );
             polarssl_free( session->peer_cert );
-            free( session->peer_cert );
             session->peer_cert = NULL;
             return( ret );
         }