openssl/sme8/openssl-fips-0.9.8e-cve-2014-3505.patch

diff -up openssl-fips-0.9.8e/ssl/d1_both.c.dtls-doublefree openssl-fips-0.9.8e/ssl/d1_both.c
--- openssl-fips-0.9.8e/ssl/d1_both.c.dtls-doublefree   2014-07-07 10:23:15.000000000 +0200
+++ openssl-fips-0.9.8e/ssl/d1_both.c   2014-08-08 10:47:12.206115439 +0200
@@ -613,8 +613,7 @@ dtls1_process_out_of_seq_message(SSL *s,
        return DTLS1_HM_FRAGMENT_RETRY;
 
 err:
-       if ( frag != NULL) dtls1_hm_fragment_free(frag);
-       if ( item != NULL) OPENSSL_free(item);
+       if (frag != NULL && item == NULL) dtls1_hm_fragment_free(frag);
        *ok = 0;
        return i;
        }
1	charliebrady	1.1	diff -up openssl-fips-0.9.8e/ssl/d1_both.c.dtls-doublefree openssl-fips-0.9.8e/ssl/d1_both.c
2			--- openssl-fips-0.9.8e/ssl/d1_both.c.dtls-doublefree 2014-07-07 10:23:15.000000000 +0200
3			+++ openssl-fips-0.9.8e/ssl/d1_both.c 2014-08-08 10:47:12.206115439 +0200
4			@@ -613,8 +613,7 @@ dtls1_process_out_of_seq_message(SSL *s,
5			return DTLS1_HM_FRAGMENT_RETRY;
6
7			err:
8			- if ( frag != NULL) dtls1_hm_fragment_free(frag);
9			- if ( item != NULL) OPENSSL_free(item);
10			+ if (frag != NULL && item == NULL) dtls1_hm_fragment_free(frag);
11			*ok = 0;
12			return i;
13			}