Bugzilla Bug 298409: fixed an array index off-by-one error and a memory
leak. r=nelsonb. git-svn-id: svn://10.0.0.236/trunk@175125 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
parent
b70fac5562
commit
7dacaeaa69
@ -1367,7 +1367,7 @@ crlgen_setNextDataFn_extension(CRLGENGeneratorData *crlGenData, void *str,
|
||||
return SECFailure;
|
||||
}
|
||||
}
|
||||
if (extStr->nextUpdatedData > MAX_EXT_DATA_LENGTH) {
|
||||
if (extStr->nextUpdatedData >= MAX_EXT_DATA_LENGTH) {
|
||||
PORT_SetError(SEC_ERROR_INVALID_ARGS);
|
||||
crlgen_PrintError(crlGenData->parsedLineNum,
|
||||
"number of fields in extension "
|
||||
@ -1415,7 +1415,7 @@ crlgen_destroyTempData(CRLGENGeneratorData *crlGenData)
|
||||
PORT_Free(crlGenData->certEntry);
|
||||
break;
|
||||
case CRLGEN_ADD_EXTENSION_CONTEXT:
|
||||
if (crlGenData->extensionEntry->nextUpdatedData) {
|
||||
if (crlGenData->extensionEntry->extData) {
|
||||
int i = 0;
|
||||
for (;i < crlGenData->extensionEntry->nextUpdatedData;i++)
|
||||
PORT_Free(*(crlGenData->extensionEntry->extData + i));
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user