[xmlsec] Crash in x509.c when flag XMLSEC_KEYINFO_FLAGS_X509DATA_STOP_ON_UNKNOWN_CERT is set

[Aleksey Sanin]

Very good catch! Thank you! I also found exactly the same problem
in the xmlsec-nss and xmlsec-mscrypto libraries :)

Thanks again!
Aleksey

Frank Gross wrote:
> Hi,
> 
>  Find attached a patch to fix a crash in openssl/x509.c file when 
> XMLSEC_KEYINFO_FLAGS_X509DATA_STOP_ON_UNKNOWN_CERT is set.
> Actually when the error message is created it uses the 'subject' 
> variable but as the variable has been released before, it leads to a crash.
> 
> Frank
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> xmlsec mailing list
> xmlsec at aleksey.com
> http://www.aleksey.com/mailman/listinfo/xmlsec