summaryrefslogtreecommitdiffstats
path: root/kbx/keybox-blob.c
diff options
context:
space:
mode:
authorJustus Winter <justus@g10code.com>2016-06-30 17:09:59 +0200
committerJustus Winter <justus@g10code.com>2016-06-30 18:50:16 +0200
commit29beea6462cca32d3278b0f7f9364ff4342327b8 (patch)
treebd80e409c597e0620dbc1d9be5da380a17e8e1e8 /kbx/keybox-blob.c
parentg10: Fix memory leak. (diff)
downloadgnupg2-29beea6462cca32d3278b0f7f9364ff4342327b8.tar.xz
gnupg2-29beea6462cca32d3278b0f7f9364ff4342327b8.zip
g10: Fix keybox-related memory leaks.
* g10/keydb.c (keydb_release): Clear keyblock cache. (keydb_get_keyblock): Revert previous change. * kbx/keybox-blob.c (create_blob_finish): Free previous buffer, free fixups after applying them. (_keybox_release_blob): Free buffer. Currently, the buffer has been extracted before the keybox is released, but this is the right thing to do here. Fixes-commit: c57501cc Signed-off-by: Justus Winter <justus@g10code.com>
Diffstat (limited to '')
-rw-r--r--kbx/keybox-blob.c24
1 files changed, 19 insertions, 5 deletions
diff --git a/kbx/keybox-blob.c b/kbx/keybox-blob.c
index 556605a84..896f137b8 100644
--- a/kbx/keybox-blob.c
+++ b/kbx/keybox-blob.c
@@ -661,18 +661,24 @@ create_blob_finish (KEYBOXBLOB blob)
/* do the fixups */
if (blob->fixup_out_of_core)
- return gpg_error (GPG_ERR_ENOMEM);
+ {
+ xfree (p);
+ return gpg_error (GPG_ERR_ENOMEM);
+ }
{
- struct fixup_list *fl;
- for (fl = blob->fixups; fl; fl = fl->next)
+ struct fixup_list *fl, *next;
+ for (fl = blob->fixups; fl; fl = next)
{
assert (fl->off+4 <= n);
p[fl->off+0] = fl->val >> 24;
p[fl->off+1] = fl->val >> 16;
p[fl->off+2] = fl->val >> 8;
p[fl->off+3] = fl->val;
+ next = fl->next;
+ xfree (fl);
}
+ blob->fixups = NULL;
}
/* Compute and store the SHA-1 checksum. */
@@ -680,8 +686,12 @@ create_blob_finish (KEYBOXBLOB blob)
pp = xtrymalloc (n);
if ( !pp )
- return gpg_error_from_syserror ();
+ {
+ xfree (p);
+ return gpg_error_from_syserror ();
+ }
memcpy (pp , p, n);
+ xfree (p);
blob->blob = pp;
blob->bloblen = n;
@@ -1000,7 +1010,11 @@ _keybox_release_blob (KEYBOXBLOB blob)
int i;
if (!blob)
return;
- /* hmmm: release membuf here?*/
+ if (blob->buf)
+ {
+ size_t len;
+ xfree (get_membuf (blob->buf, &len));
+ }
xfree (blob->keys );
xfree (blob->serialbuf);
for (i=0; i < blob->nuids; i++)