[gnutls-devel] GnuTLS | leancrypto: support leancrypto for post-quantum algorithms (!1925)

[Read-only notification of GnuTLS library development activities]

Merge request https://gitlab.com/gnutls/gnutls/-/merge_requests/1925 was reviewed by Zoltán Fridrich

--
  
Zoltán Fridrich started a new discussion on lib/nettle/pk.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1925#note_2306107847

 > +	if (ret < 0) {
 > +		_gnutls_free_datum(ciphertext);
 > +		_gnutls_free_key_datum(shared_secret);

I think this could invalid free if `ciphertext` allocation fails and `shared_secret` datum is not zeroized.

--
  
Zoltán Fridrich started a new discussion on lib/nettle/pk.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1925#note_2306107863

 > +	if (ret < 0) {
 > +		_gnutls_free_key_datum(raw_priv);
 > +		_gnutls_free_key_datum(raw_pub);

again possible invalid free as I mentioned previously, there might be more of these.


-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1925
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250120/525e5746/attachment.html>