A failure in tls_generate_random() will result in a call to ref_put() before the received data list has been initialised, which will cause free_tls() to attempt to traverse an uninitialised list. Fix by ensuring that all fields referenced by free_tls() are initialised before any of the potential failure paths. Signed-off-by: Michael Brown <mcb30@ipxe.org>tags/v1.20.1
|
|
||
2788 |
|
2788 |
|
2789 |
|
2789 |
|
2790 |
|
2790 |
|
|
2791 |
|
|
|
2792 |
|
|
|
2793 |
|
|
2791 |
|
2794 |
|
2792 |
|
2795 |
|
2793 |
|
2796 |
|
|
|
||
2797 |
|
2800 |
|
2798 |
|
2801 |
|
2799 |
|
2802 |
|
2800 |
|
|
|
2801 |
|
|
|
2802 |
|
|
|
2803 |
|
2803 |
|
2804 |
|
2804 |
|
2805 |
|
2805 |
|