u2fs_registration_verify leaks key_ptr
Closed this issue · 0 comments
frozencemetery commented
In decode_user_key()
, key
is the result of a call to EC_KEY_new_by_curve_name()
. It is returned through key_ptr
to u2fs_registration_verify()
. It is then passed to dump_user_key()
, where it is used but not freed (passed to EC_KEY_get0_public_key()
, which doesn't consume it). It then leaks since u2fs_registration_verify()
doesn't reference it again.