From d4ed35bba83f0591784a1a8ac0fc8a8ab096c0bb Mon Sep 17 00:00:00 2001 From: Marc <34656315+MarcT512@users.noreply.github.com> Date: Mon, 3 Jun 2019 17:02:39 +0100 Subject: [PATCH] Fix use after free of ssl object. --- sslscan.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sslscan.c b/sslscan.c index a5353932..edcd1cc3 100644 --- a/sslscan.c +++ b/sslscan.c @@ -1574,8 +1574,8 @@ int testCipher(struct sslCheckOptions *options, const SSL_METHOD *sslMethod) } else if (cipherStatus != 1) { - SSL_free(ssl); printf_verbose("SSL_get_error(ssl, cipherStatus) said: %d\n", SSL_get_error(ssl, cipherStatus)); + SSL_free(ssl); return false; }