Vulnerability in OpenSSL CVE-2009-3245

It was discovered that OpenSSL did not always check the return value of the bn_wexpand() function. An attacker able to trigger a memory allocation failure in that function could cause an application using the OpenSSL library to crash or, possibly, execute arbitrary code.

Found by Martin Olsson, Neel Mehta.