This has already been corrected, please check a recent snapshot of OpenSSL.
Thanks still.
Ticket resolved.
[EMAIL PROTECTED] - Fri Sep 19 21:06:59 2003]:
> (Excuse the filenames, patch generated from OpenBSD -current sources.)
>
> Index: lib/libssl/src/apps/openssl.c
> ===================================================================
> RCS file: /cvs/src/lib/libssl/src/apps/openssl.c,v
> retrieving revision 1.8
> diff -u -r1.8 openssl.c
> --- lib/libssl/src/apps/openssl.c 12 May 2003 02:18:35 -0000 1.8
> +++ lib/libssl/src/apps/openssl.c 19 Sep 2003 14:38:36 -0000
> @@ -163,7 +163,7 @@
> goto err;
> }
>
> - if (type < 0 || type > CRYPTO_NUM_LOCKS)
> + if (type < 0 || type >= CRYPTO_NUM_LOCKS)
> {
> errstr = "type out of bounds";
> goto err;
> Index: lib/libssl/src/ssl/ssltest.c
> ===================================================================
> RCS file: /cvs/src/lib/libssl/src/ssl/ssltest.c,v
> retrieving revision 1.9
> diff -u -r1.9 ssltest.c
> --- lib/libssl/src/ssl/ssltest.c 12 May 2003 02:18:40 -0000 1.9
> +++ lib/libssl/src/ssl/ssltest.c 19 Sep 2003 14:38:37 -0000
> @@ -291,7 +291,7 @@
> goto err;
> }
>
> - if (type < 0 || type > CRYPTO_NUM_LOCKS)
> + if (type < 0 || type >= CRYPTO_NUM_LOCKS)
> {
> errstr = "type out of bounds";
> goto err;
>
> ---
> Aaron Campbell ([EMAIL PROTECTED])
> http://www.monkey.org/~aaron
>
--
Richard Levitte
[EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
