[openssl] master update

Dr. Paul Dale pauli at openssl.org
Sat Apr 20 23:23:22 UTC 2019


The branch master has been updated
       via  b8621bdde70690361a36dca52688a3d946c3fe0f (commit)
      from  6fda11ae5a06e28fd9463e5afb60735d074904b3 (commit)


- Log -----------------------------------------------------------------
commit b8621bdde70690361a36dca52688a3d946c3fe0f
Author: Pauli <paul.dale at oracle.com>
Date:   Fri Apr 19 16:23:23 2019 +1000

    Fix bug in entropy gathering.
    
    This only impacts FIPS mode or someone who has enabled the FIPS 140.2
    4.9.2 Conditional Tests.  i.e. nobody currently.
    
    Fix a significant issue in the entropy gathering for the continuous RNG
    testing.  The impact is using an uninitialised buffer instead of the gathered
    entropy.
    
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
    (Merged from https://github.com/openssl/openssl/pull/8789)

-----------------------------------------------------------------------

Summary of changes:
 crypto/rand/rand_crng_test.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crypto/rand/rand_crng_test.c b/crypto/rand/rand_crng_test.c
index 74a64ee..87f4ee1 100644
--- a/crypto/rand/rand_crng_test.c
+++ b/crypto/rand/rand_crng_test.c
@@ -30,7 +30,7 @@ int rand_crngt_get_entropy_cb(unsigned char *buf)
     while ((n = rand_pool_acquire_entropy(crngt_pool)) != 0)
         if (n >= CRNGT_BUFSIZ) {
             p = rand_pool_detach(crngt_pool);
-            memcpy(crngt_prev, p, CRNGT_BUFSIZ);
+            memcpy(buf, p, CRNGT_BUFSIZ);
             rand_pool_reattach(crngt_pool, p);
             return 1;
         }


More information about the openssl-commits mailing list