[openssl-commits] [openssl] OpenSSL_1_1_0-stable update

[Kurt Roeckx]

The branch OpenSSL_1_1_0-stable has been updated
       via  3c55aec6e9f68ec45162e85434d2911fa67e8f15 (commit)
      from  0baae1c01f4975cc6b92b59e34d1a2a05ae48414 (commit)


- Log -----------------------------------------------------------------
commit 3c55aec6e9f68ec45162e85434d2911fa67e8f15
Author: Kurt Roeckx <kurt at roeckx.be>
Date:   Thu Dec 15 20:23:52 2016 +0100

    Don't call memcpy with NULL as source
    
    Calling it with lenght 0 and NULL as source is undefined behaviour.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    GH: #2089
    (cherry picked from commit eeab356c298248108b82157ef51172ba040646f7)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bn/bn_intern.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/crypto/bn/bn_intern.c b/crypto/bn/bn_intern.c
index 9227b6e..2c97064 100644
--- a/crypto/bn/bn_intern.c
+++ b/crypto/bn/bn_intern.c
@@ -167,7 +167,8 @@ int bn_copy_words(BN_ULONG *out, const BIGNUM *in, int size)
         return 0;
 
     memset(out, 0, sizeof(*out) * size);
-    memcpy(out, in->d, sizeof(*out) * in->top);
+    if (in->d != NULL)
+        memcpy(out, in->d, sizeof(*out) * in->top);
     return 1;
 }