fix #38: affverify failing due to evp md context being used after freed

sshock · Feb 16, 2019 · fb5a4fd · fb5a4fd
1 parent 8207bec
commit fb5a4fd
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/.gitignore b/.gitignore
@@ -94,6 +94,7 @@ tools/affstats
 tools/affuse
 tools/affverify
 tools/affxml
+tools/rawevidence.raw
 
 lib/version.h
 *.lo

diff --git a/lib/crypto.cpp b/lib/crypto.cpp
@@ -691,8 +691,8 @@ int af_sig_verify_seg2(AFFILE *af,const char *segname,EVP_PKEY * /*pubkey*/,u_ch
     EVP_VerifyUpdate(md,(const unsigned char *)segname,strlen(segname)+1);
     EVP_VerifyUpdate(md,(const unsigned char *)&arg_net,sizeof(arg_net));
     EVP_VerifyUpdate(md,segbuf,seglen);
-    EVP_MD_CTX_free(md);
     int r = EVP_VerifyFinal(md,sigbuf,sigbuf_len,af->crypto->sign_pubkey);
+    EVP_MD_CTX_free(md);
     free(segbuf);
 
     if(r==1) return 0;			// verifies