On Thu, Jul 03, 2014 at 07:51:28PM +0200, Toralf Förster via RT wrote:
> I think cppcheck is right here in void DES_ofb64_encrypt(), line 84, 85
> and 96, or ?:
>
The line before that:
dp=d;
> l2c(v0,dp);<--- Uninitialized variable: d
> l2c(v1,dp);<--- Uninitialized variable: d
> while (l--)
> {
> if (n == 0)
> {
> DES_encrypt1(ti,schedule,DES_ENCRYPT);
> dp=d;
> t=ti[0]; l2c(t,dp);
> t=ti[1]; l2c(t,dp);
> save++;
> }
> *(out++)= *(in++)^d[n];<--- Uninitialized variable: d
> n=(n+1)&0x07;
> }
d is uninitialized, but it's being written to, not read from,
so I don't see a problem with this.
Kurt
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majord...@openssl.org
