[openssl.org #1316] pkcs12 - deref before null check

Wed, 12 Apr 2006 14:58:42 -0700 

deref off pbe2->keyfunc->parameter before null check.

openssl-0.9.8a/crypto/evp/p5_crpt2.c

Love


        /* Now decode key derivation function */

        pbuf = pbe2->keyfunc->parameter->value.sequence->data;
        plen = pbe2->keyfunc->parameter->value.sequence->length;
        if(!pbe2->keyfunc->parameter ||
                 (pbe2->keyfunc->parameter->type != V_ASN1_SEQUENCE) ||
                                !(kdf = d2i_PBKDF2PARAM(NULL, &pbuf, plen)) ) {
                EVPerr(EVP_F_PKCS5_V2_PBE_KEYIVGEN,EVP_R_DECODE_ERROR);
                goto err;
        }

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to