[openssl-commits] [openssl] OpenSSL_1_1_0-stable update

Rich Salz rsalz at openssl.org
Wed Jun 14 13:50:41 UTC 2017


The branch OpenSSL_1_1_0-stable has been updated
       via  ded1b50f83c4d0d3e12a2a64d3bd66a27884136e (commit)
      from  48dd11a8c100988caf5c5a2fe5b66db6e86a83f4 (commit)


- Log -----------------------------------------------------------------
commit ded1b50f83c4d0d3e12a2a64d3bd66a27884136e
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Tue Jun 13 22:08:03 2017 +0200

    Fix another possible crash in rsa_ossl_mod_exp.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/3675)
    (cherry picked from commit 5625567f9c7daaa2e2689647e10e4c5d7370718f)

-----------------------------------------------------------------------

Summary of changes:
 crypto/rsa/rsa_ossl.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/crypto/rsa/rsa_ossl.c b/crypto/rsa/rsa_ossl.c
index 793e2f9..62a8895 100644
--- a/crypto/rsa/rsa_ossl.c
+++ b/crypto/rsa/rsa_ossl.c
@@ -603,6 +603,8 @@ static int rsa_ossl_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa, BN_CTX *ctx)
     r1 = BN_CTX_get(ctx);
     m1 = BN_CTX_get(ctx);
     vrfy = BN_CTX_get(ctx);
+    if (vrfy == NULL)
+        goto err;
 
     {
         BIGNUM *p = BN_new(), *q = BN_new();


More information about the openssl-commits mailing list