On Thu, 2010-07-08 at 18:54 +0200, Dr. Stephen Henson wrote:
> On Thu, Jul 08, 2010, Brian Makin wrote:
> 
> > 
> > Ahh, got it.
> > in crypto/evp/evp_pbe.c:EvP_PBE_alg_add
> > pbe_tmp isn't initialized which means sometimes it has a bogus value.
> > 
> > 119c119
> > <   EVP_PBE_CTL *pbe_tmp = NULL, pbelu;
> > ---
> > >   EVP_PBE_CTL *pbe_tmp, pbelu;
> > 
> > Is that all that is needed or is this indicative of a lower level
> > problem? 
> > 
> 
> Ah, yes that is the problem. When there are no existing PBE algorithms pbe_tmp
> is uninitialised. I've just committed a fix. Let me know if that fixes your
> problems.
> 
> Steve.
> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           majord...@openssl.org

Testing with the latest development snapshot looks good.  It appears
that is the fix.

Thank you very much for your assistance!


-- 
BRIAN MAKIN
Senior Software Engineer
ma...@vivisimo.com

Vivisimo [Search Done Rightâ„¢]
1710 Murray Avenue
Pittsburgh, PA 15217 USA
tel: +1.412.422.2499
vivisimo.com

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to