fuzz_pkcs15_decode: fixed use after free

This commit is contained in:
Frank Morgner 2019-09-30 20:02:12 +02:00
parent aae529547c
commit d965156fe6

View File

@ -56,6 +56,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size)
obj = calloc(1, sizeof *obj); obj = calloc(1, sizeof *obj);
while (SC_SUCCESS == decode_entries[i](p15card, obj, &p, &len)) { while (SC_SUCCESS == decode_entries[i](p15card, obj, &p, &len)) {
sc_pkcs15_free_object(obj); sc_pkcs15_free_object(obj);
obj = calloc(1, sizeof *obj);
} }
sc_pkcs15_free_object(obj); sc_pkcs15_free_object(obj);
} }