On Thu, Jul 08, 2010, Brian Makin wrote:

> 
> Ahh, got it.
> in crypto/evp/evp_pbe.c:EvP_PBE_alg_add
> pbe_tmp isn't initialized which means sometimes it has a bogus value.
> 
> 119c119
> <     EVP_PBE_CTL *pbe_tmp = NULL, pbelu;
> ---
> >     EVP_PBE_CTL *pbe_tmp, pbelu;
> 
> Is that all that is needed or is this indicative of a lower level
> problem? 
> 

Ah, yes that is the problem. When there are no existing PBE algorithms pbe_tmp
is uninitialised. I've just committed a fix. Let me know if that fixes your
problems.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to