[openssl-dev] [openssl.org #4105] null pointer dereference in BN_lshift when coming from dsa_builtin_paramgen

2015-10-22 Thread Pascal Cuoq via RT
BN_POOL_get() can return NULL when OPENSSL_malloc() fails: https://github.com/openssl/openssl/blob/984d6c6052169bcae8010de33f7796e455536d61/crypto/bn/bn_ctx.c#L365-L366 This causes BN_CTX_get() to return NULL: https://github.com/openssl/openssl/blob/984d6c6052169bcae8010de33f7796e455536d61/crypto

Re: [openssl-dev] [openssl.org #4094] Nonsensical pointer comparison in PACKET_buf_init

2015-10-22 Thread stefan.n...@t-online.de via RT
Hi, Wouldn't if ( UINTPTR_MAX - (uintptr_t) buffer < len) be closer to the intention of the original check? Or is this undefined behaviour as well and I stupidly missed that fact? Regards, Stefan ___ openssl-dev mailing

[openssl-dev] [openssl.org #4106] Bug in smime command in master

2015-10-22 Thread Dmitry Belyavsky via RT
Hello! When I try to verify the signed message using the master branch, I get an error. The command line is: openssl smime -verify -inform der -in signed2_2_256.asn -noverify -signer signer.certs -out was_signed.dat STDERR CONTENTS: smime: Cannot open input file signer.certs, No such file or di

Re: [openssl-dev] [openssl.org #4094] Nonsensical pointer comparison in PACKET_buf_init

2015-10-22 Thread Kaduk, Ben via RT
On 10/22/2015 01:02 PM, stefan.n...@t-online.de via RT wrote: > Hi, > > Wouldn't > if ( UINTPTR_MAX - (uintptr_t) buffer < len) > be closer to the intention of the original check? > Or is this undefined behaviour as well and I > stupidly missed that fact? > That appears to be defined behavio

[openssl-dev] [openssl.org #4101] [PATCH] Doc clarification for EVP_DigestVerifyFinal

2015-10-22 Thread Rich Salz via RT
OpenSSL_1_0_1-stable 2d404dc Clarify return values for EVP_DigestVerifyFinal. OpenSSL_1_0_2-stable 8d43c00 Clarify return values for EVP_DigestVerifyFinal. master 8cbb048 Clarify return values for EVP_DigestVerifyFinal. Author: Adam Eijdenberg Date: Mon Oct 19 11:16:25 2015 -0700 Clarify return

[openssl-dev] [openssl.org #1544] bug report: openssl applications crashing due to uninitialized variables

2015-10-22 Thread Rich Salz via RT
old release, many issues fixed. perhaps more remain; please open new tickets if/when found. -- Rich Salz, OpenSSL dev team; rs...@openssl.org ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev