See
https://boringssl.googlesource.com/boringssl/+/d6405beb2c75564edbbb7f4203252aa5edee2359

It seems OpenSSL has the same bug, although the code is slightly different,
and my fix for BoringSSL should be easy to adapt for OpenSSL.

It may be worth trying to find the same pattern elsewhere in the OpenSSL
code.

Cheers,
Brian
_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Reply via email to