5c61b17893
Stefan Eissing
2026-09-25
Subject
apple-sectrust: check ocsp copy alloc
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
lib/vtls/apple.c+4 -1
| @@ -204,7 +204,10 @@ CURLcode Curl_vtls_apple_verify(struct Curl_cfilter *cf, | |
| #if defined(HAVE_BUILTIN_AVAILABLE) && defined(SUPPORTS_SecOCSP) | |
| if(__builtin_available(macOS 10.9, iOS 7, tvOS 9, watchOS 2, *)) { | |
| CFDataRef ocspdata = CFDataCreate(NULL, ocsp_buf, (CFIndex)ocsp_len); | |
| - | |
| + | if(!ocspdata) { |
| + | result = CURLE_OUT_OF_MEMORY; |
| + | goto out; |
| + | } |
| status = SecTrustSetOCSPResponse(trust, ocspdata); | |
| CFRelease(ocspdata); | |
| if(status != noErr) { | |