From 430ffbe564b2175ced031bea0ea544fad1bdfc9e Mon Sep 17 00:00:00 2001
From: Paul Bakker <p.j.bakker@polarssl.org>
Date: Tue, 1 May 2012 08:14:20 +0000
Subject: [PATCH]  -  Fixed potential heap corruption in x509_name allocation

---
 ChangeLog           | 1 +
 library/x509parse.c | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index 790ac41d1..c1be440e3 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -23,6 +23,7 @@ Changes
 Bugfix
    * Fixed handling error in mpi_cmp_mpi() on longer B values (found by
      Hui Dong)
+   * Fixed potential heap corruption in x509_name allocation
 
 Security
    * Fixed potential memory corruption on miscrafted client messages (found by
diff --git a/library/x509parse.c b/library/x509parse.c
index 9d01a6500..07fc439e3 100644
--- a/library/x509parse.c
+++ b/library/x509parse.c
@@ -305,6 +305,8 @@ static int x509_get_name( unsigned char **p,
     if( cur->next == NULL )
         return( POLARSSL_ERR_X509_MALLOC_FAILED );
 
+    memset( cur->next, 0, sizeof( x509_name ) );
+
     return( x509_get_name( p, end2, cur->next ) );
 }