[Rpm-maint] [rpm-software-management/rpm] Improve the OpenSSL crypto backend (#1610)

[Demi Marie Obenour]

This fixes a double-free bug in the OpenSSL backend.  This bug is not considered exploitable as it cannot be reliably triggered by an attacker.  It also deletes a bunch of cruft.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1610

-- Commit Summary --

  * Simplify OpenSSL crypto code
  * Avoid double frees if EVP_PKEY_assign_RSA fails

-- File Changes --

    M rpmio/digest_openssl.c (88)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1610.patch
https://github.com/rpm-software-management/rpm/pull/1610.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1610
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210329/fba65661/attachment.html>