[openssl.org #521] [PATCH] Avoid uninitialized data in random buffer

2007-09-20 Thread Lutz Jaenicke via RT
A respective compile time macro PEDANTIC (to be added to the C flags as -DPEDANTIC) has been added for OpenSSL 0.9.8f. The behavior has been clarified in the manual page and the FAQ __ OpenSSL Project

Re: [openssl.org #521] [PATCH] Avoid uninitialized data in random buffer

2003-03-13 Thread [EMAIL PROTECTED] via RT
I think there's we need to create a FAQ entry about this ... * Daniel Brahneborg ([EMAIL PROTECTED]) wrote: [snip] At lines 467-469 in crypto/rand/md_rand.c is an interesting thing: #ifndef PURIFY MD_Update(m,buf,j); /* purify complains */ #endif That is the code that causes the

[openssl.org #521] [PATCH] Avoid uninitialized data in random buffer

2003-02-28 Thread Daniel Brahneborg via RT
Hi, I'm using Valgrind to debug a program that uses the OpenSSL libraries, and got warnings about uninitialized data in the function RSA_padding_add_PKCS1_type_2(), on the line with } while (*p == '\0'); (line 171 in version 0.9.7a). The following patch ensures that the data is always modified,

Re: [openssl.org #521] [PATCH] Avoid uninitialized data in random buffer

2003-02-28 Thread Nils Larsch via RT
Daniel Brahneborg via RT wrote: Hi, I'm using Valgrind to debug a program that uses the OpenSSL libraries, and got warnings about uninitialized data in the function RSA_padding_add_PKCS1_type_2(), on the line with } while (*p == '\0'); (line 171 in version 0.9.7a). The following patch

Re: [openssl.org #521] [PATCH] Avoid uninitialized data in random buffer

2003-02-28 Thread Daniel Brahneborg via RT
Nils Larsch via RT wrote: Daniel Brahneborg via RT wrote: I'm using Valgrind to debug a program that uses the OpenSSL libraries, and got warnings about uninitialized data in the function RSA_padding_add_PKCS1_type_2(), on the line with } while (*p == '\0'); (line 171 in version 0.9.7a). The

Re: [openssl.org #521] [PATCH] Avoid uninitialized data in random buffer

2003-02-28 Thread David Schwartz
On Fri, 28 Feb 2003 11:34:20 +0100 (MET), Daniel Brahneborg via RT wrote: At lines 467-469 in crypto/rand/md_rand.c is an interesting thing: #ifndef PURIFY MD_Update(m,buf,j); /* purify complains */ #endif That is the code that causes the problem (I just verified it with Valgrind). Does it