Fix extNegList leaks on A-ASSOCIATE parse failure.
authorMichael Onken <onken@open-connections.de>
Tue, 7 Jul 2026 20:38:06 +0000 (22:38 +0200)
committerÉtienne Mollier <emollier@debian.org>
Tue, 7 Jul 2026 20:38:06 +0000 (22:38 +0200)
commit58f7c98f7214cbac5934d30e2ba8bdf56976b4f4
tree7b2a7acec00c1e48ffb524a684ccff74547db03c
parent4d011b2916cfc6e08381033602dd0b42253cb66f
Fix extNegList leaks on A-ASSOCIATE parse failure.

Applied-Upstream: 23f181f7a3cb8334056f751a3a0c2ddf01046752
Last-Update: 2026-05-26
Reviewed-By: Étienne Mollier <emollier@debian.org>
Bug-Debian: https://bugs.debian.org/1141411

Thanks for the report and analysis to Abhinav Agarwal.

This closes DCMTK feature #126.

Gbp-Pq: Name 0021-CVE-2026-50254.patch
dcmnet/libsrc/dulconst.cc
dcmnet/libsrc/dulfsm.cc
dcmnet/libsrc/dulparse.cc
dcmnet/libsrc/extneg.cc
dcmnet/libsrc/helpers.cc