Fix extNegList leaks on A-ASSOCIATE parse failure.
authorMichael Onken <onken@open-connections.de>
Mon, 6 Jul 2026 20:39:03 +0000 (22:39 +0200)
committerÉtienne Mollier <emollier@debian.org>
Mon, 6 Jul 2026 20:39:03 +0000 (22:39 +0200)
commit9d8172861997e769cdbf7ff3ce30c89bf12d051a
tree3263553a0bd270b8453f08e99c5d555d36310b46
parent3a628dc6dde08c82badcedc6cf889276711afd39
Fix extNegList leaks on A-ASSOCIATE parse failure.

Applied-Upstream: 23f181f7a3cb8334056f751a3a0c2ddf01046752
Last-Update: 2026-05-26
Reviewed-By: Étienne Mollier <emollier@debian.org>
Bug-Debian: https://bugs.debian.org/1141411

Thanks for the report and analysis to Abhinav Agarwal.

This closes DCMTK feature #126.

Gbp-Pq: Name CVE-2026-50254.patch
dcmnet/libsrc/dulconst.cc
dcmnet/libsrc/dulfsm.cc
dcmnet/libsrc/dulparse.cc
dcmnet/libsrc/extneg.cc
dcmnet/libsrc/helpers.cc