Dear OpenSSL developers,

what is your policy regarding NULL pointer checks? Looking through the
code, I see some functions that receive a pointer parameter and
dereference it without checking for NULL first. Examples are
SSL_accept(SSL *s) or RSA_sign(..., RSA *rsa).

Do you consider such behaviour a bug? Or is it just too obvious that
calling these functions with a NULL argument makes no sense at all?

Best regards,

   Martin
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to