Re: [openssl.org #3150] Bug Report (with trivial fix): fips module segfault

2013-10-23 Thread Micah Cowan via RT
On 10/23/2013 06:16 AM, Stephen Henson via RT wrote: > What version of OpenSSL are you using? This was worked around in 1.0.1e due to > the difficulty of changing the FIPS module. Ah, okay; I see the drbg_free_entropy functions are checking for NULL there now, which works (even though it's probabl

[openssl.org #3150] Bug Report (with trivial fix): fips module segfault

2013-10-23 Thread Micah Cowan via RT
*Version: *This bug was found in openssl-fips 2.0.2; I looked in 2.0.5, and the problem appears to be present there still. * Issue:* The fips module has a bug that can result in segfaults when fips_get_entropy() fails during initialization of openssl-linked-with-fips. *Fix: *Because the fix is ext