Yubico/libu2f-server

u2fs_registration_verify leaks key_ptr

Closed this issue · 0 comments

In decode_user_key(), key is the result of a call to EC_KEY_new_by_curve_name(). It is returned through key_ptr to u2fs_registration_verify(). It is then passed to dump_user_key(), where it is used but not freed (passed to EC_KEY_get0_public_key(), which doesn't consume it). It then leaks since u2fs_registration_verify() doesn't reference it again.