[Rpm-maint] [rpm-software-management/rpm] Fix use-after-free in haveSignature() (PR #1880)

[Michal Domonkos]

pgpPrtParams() may leave sig2 unchanged and if we're not in the very
first iteration of the while() loop, we could pass a freed pointer to
pgpDigParamsCmp().  Fix by setting it to NULL after freeing.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1880

-- Commit Summary --

  * Fix use-after-free in haveSignature()

-- File Changes --

    M sign/rpmgensig.c (2)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1880.patch
https://github.com/rpm-software-management/rpm/pull/1880.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1880
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/1880 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20220107/f99676ca/attachment.html>