[openssl-dev] [openssl.org #3841] Uninitialized memory causes segmentation fault

[Rich Salz via RT]

Fixed in master. Note that existing code can use the EVP_CTRL_INIT ctrl
operation to initialise cipher_data.
--
Rich Salz, OpenSSL dev team; rs...@openssl.org

___
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] [openssl.org #3841] Uninitialized memory causes segmentation fault

[Misaki.Miyashita via RT]

Hi,

We encountered a segmentation fault in our engine code as 
EVP_CIPHER-cleanup() is called before EVP_CIPHER_CTX-cipher_data gets 
initialized by EVP_CIPHER-init().  This can be prevented if 
EVP_CIPHER_CTX-cipher_data is initialized with 0s after the allocation 
in EVP_CipherInit_ex().

Please refer to the following PR.
PR#277 Uninitialized memory causes segmentation fault

Thank you

-- misaki

-- 
Oracle Solaris Security - Austin, TX
Principal Software Engineer


___
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev