[openssl.org #1659] NULL pointer dereference in rsautl bug and patch

2008-04-17 Thread Lutz Jaenicke via RT
I have applied a different modification which is a little bit more in line with the handling in other applications (where the handling seems to be correct). http://cvs.openssl.org/chngview?cn=17067 Best regards, Lutz __

[openssl.org #1659] NULL pointer dereference in rsautl bug and patch

2008-03-27 Thread Vladimir Kotal via RT
rsautl openssl(1) command contains a careless-programming bug. It can be reproduced as follows: openssl genrsa -out /tmp/server.key cp /etc/passwd /tmp/testfile rm -f /tmp/test2 openssl rsautl -inkey /tmp/server.key -out /tmp/test2 \ -in /tmp/testfile \ -sign -keyform after