openssl/sme8/openssl-fips-0.9.8e-cve-2014-3505.patch

diff -up openssl-fips-0.9.8e/ssl/d1_both.c.dtls-doublefree openssl-fips-0.9.8e/ssl/d1_both.c
--- openssl-fips-0.9.8e/ssl/d1_both.c.dtls-doublefree   2014-07-07 10:23:15.000000000 +0200
+++ openssl-fips-0.9.8e/ssl/d1_both.c   2014-08-08 10:47:12.206115439 +0200
@@ -613,8 +613,7 @@ dtls1_process_out_of_seq_message(SSL *s,
        return DTLS1_HM_FRAGMENT_RETRY;
 
 err:
-       if ( frag != NULL) dtls1_hm_fragment_free(frag);
-       if ( item != NULL) OPENSSL_free(item);
+       if (frag != NULL && item == NULL) dtls1_hm_fragment_free(frag);
        *ok = 0;
        return i;
        }
1	diff -up openssl-fips-0.9.8e/ssl/d1_both.c.dtls-doublefree openssl-fips-0.9.8e/ssl/d1_both.c
2	--- openssl-fips-0.9.8e/ssl/d1_both.c.dtls-doublefree 2014-07-07 10:23:15.000000000 +0200
3	+++ openssl-fips-0.9.8e/ssl/d1_both.c 2014-08-08 10:47:12.206115439 +0200
4	@@ -613,8 +613,7 @@ dtls1_process_out_of_seq_message(SSL *s,
5	return DTLS1_HM_FRAGMENT_RETRY;
6
7	err:
8	- if ( frag != NULL) dtls1_hm_fragment_free(frag);
9	- if ( item != NULL) OPENSSL_free(item);
10	+ if (frag != NULL && item == NULL) dtls1_hm_fragment_free(frag);
11	*ok = 0;
12	return i;
13	}