equal
deleted
inserted
replaced
1 Fix DSA double free. This has been fixed in newer versions of cryptography and |
|
2 will be part of a future update of the cryptography version in userland. |
|
3 |
|
4 https://github.com/pyca/cryptography/pull/2010 |
|
5 |
|
6 --- cryptography-0.8.2/src/cryptography/hazmat/backends/openssl/dsa.py 2015-09-04 11:01:09.332591847 -0700 |
|
7 +++ cryptography-0.8.2/src/cryptography/hazmat/backends/openssl/dsa.py 2015-09-04 11:01:43.317323715 -0700 |
|
8 @@ -40,13 +40,10 @@ |
|
9 self._hash_ctx.update(data) |
|
10 |
|
11 def verify(self): |
|
12 - self._dsa_cdata = self._backend._ffi.gc(self._public_key._dsa_cdata, |
|
13 - self._backend._lib.DSA_free) |
|
14 - |
|
15 data_to_verify = self._hash_ctx.finalize() |
|
16 |
|
17 data_to_verify = _truncate_digest_for_dsa( |
|
18 - self._dsa_cdata, data_to_verify, self._backend |
|
19 + self._public_key._dsa_cdata, data_to_verify, self._backend |
|
20 ) |
|
21 |
|
22 # The first parameter passed to DSA_verify is unused by OpenSSL but |
|