g10: Fix double free when locating by mbox
authorAndre Heinecke <aheinecke@intevation.de>
Thu, 18 Apr 2019 11:19:05 +0000 (13:19 +0200)
committerDaniel Kahn Gillmor <dkg@fifthhorseman.net>
Thu, 22 Aug 2019 19:11:59 +0000 (20:11 +0100)
commit13452d0077f4af7748aabe11c91308ffe62bec80
treeaa4ef1fa0e925f007ed3f307a84c6fd4e2aa9198
parent3f8490f79c7f51c67548b1e9ba097225fdc60768
g10: Fix double free when locating by mbox

* g10/getkey.c (get_best_pubkey_byname): Set new.uid always
to NULL after use.

--
pubkey_cmp is not guranteed to set new.uid.
So if the diff < 0 case is reached best is set to new.

If then diff > 0 is reached without modifying new.uid
e.g. if the key has no matching mboxes. new.uid is
free'd even though the uid is still referenced in
best.

GnuPG-Bug-Id: T4462
(cherry picked from commit e57954ed278cb5e6e725005b1ecaf7ce70006ce0)
(cherry picked from commit 35899dc2903b118620e6f9f0fa6b21c8568abbf1)

Gbp-Pq: Topic from-2.2.16
Gbp-Pq: Name g10-Fix-double-free-when-locating-by-mbox.patch
g10/getkey.c