[openssl-commits] [openssl] OpenSSL_1_1_0-stable update

Rich Salz rsalz at openssl.org
Tue Apr 11 23:16:24 UTC 2017


The branch OpenSSL_1_1_0-stable has been updated
       via  3906d9e8df270641a98afbc3c658e2570db70731 (commit)
      from  8e4fa6f7f0a1f648911088c2f1e432ca8c2b78e5 (commit)


- Log -----------------------------------------------------------------
commit 3906d9e8df270641a98afbc3c658e2570db70731
Author: Frank Morgner <frankmorgner at gmail.com>
Date:   Mon Apr 10 14:15:09 2017 +0200

    Added error checking for OBJ_create
    
    fixes segmentation fault in case of not enough memory for object creation
    
    CLA: trivial
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/3157)
    (cherry picked from commit 487a73def65aa6ffedf5baf353e912fe61aa3c7c)

-----------------------------------------------------------------------

Summary of changes:
 crypto/objects/obj_dat.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/crypto/objects/obj_dat.c b/crypto/objects/obj_dat.c
index 259851b..9f37417 100644
--- a/crypto/objects/obj_dat.c
+++ b/crypto/objects/obj_dat.c
@@ -692,6 +692,8 @@ int OBJ_create(const char *oid, const char *sn, const char *ln)
 
     /* Convert numerical OID string to an ASN1_OBJECT structure */
     tmpoid = OBJ_txt2obj(oid, 1);
+    if (tmpoid == NULL)
+        return 0;
 
     /* If NID is not NID_undef then object already exists */
     if (OBJ_obj2nid(tmpoid) != NID_undef) {


More information about the openssl-commits mailing list