Page MenuHome GnuPG

Uninitialized use of l1 variable in _gcry_sexp_vextract_param
Closed, ResolvedPublic

Description

https://dev.gnupg.org/source/libgcrypt/browse/master/src/sexp.c;0f2c6ce2c9504c6df435463243edaa669e57b109$2283

The l1 is uninitialized in the first case of goto cleanup and sexp_release() is called with this uninitialized value.