aports/main/libspf2/CVE-2021-20314.patch
2025-04-07 14:28:55 +00:00

23 lines
786 B
Diff

From 8b50e5cef36fc7fbc3c8808168e51cc33a3cc940 Mon Sep 17 00:00:00 2001
From: bdijkstra82 <boudewijn@indes.com>
Date: Wed, 30 Mar 2016 21:47:46 +0200
Subject: [PATCH] fix use-after-free
Not sure what the intention is here, but in no case should
spf_record_exp point to a freed object. (Fixes crash on OpenBSD 5.9.)
---
src/libspf2/spf_request.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/libspf2/spf_request.c b/src/libspf2/spf_request.c
index c310a5a..8a73275 100644
--- a/src/libspf2/spf_request.c
+++ b/src/libspf2/spf_request.c
@@ -259,6 +259,7 @@ SPF_request_query_record(SPF_request_t *spf_request,
err = SPF_record_interpret(spf_record,
spf_request, spf_response, 0);
SPF_record_free(spf_record);
+ spf_response->spf_record_exp = NULL;
return err;
}