[openssl-commits] Broken: openssl/openssl#8431 (master - 6d047e0)

Travis CI builds at travis-ci.org
Fri Feb 10 06:34:01 UTC 2017


Build Update for openssl/openssl
-------------------------------------

Build: #8431
Status: Broken

Duration: 18 minutes and 48 seconds
Commit: 6d047e0 (master)
Author: Peter Wu
Message: SSL_get_shared_sigalgs: handle negative idx parameter

When idx is negative (as is the case with do_print_sigalgs in
apps/s_cb.c), AddressSanitizer complains about a buffer overflow (read).
Even if the pointer is not dereferenced, this is undefined behavior.

Change the user not to use "-1" as index since the function is
documented to return 0 on out-of-range values.

Tested with `openssl s_server` and `curl -k https://localhost:4433`.

Reviewed-by: Rich Salz <rsalz at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2349)

View the changeset: https://github.com/openssl/openssl/compare/68a55f3b4510...6d047e06e67c

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/199920703

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20170210/30e1e84b/attachment-0001.html>


More information about the openssl-commits mailing list