[openssl] openssl-3.0 update

Dr. Paul Dale pauli at openssl.org
Thu Nov 25 00:35:51 UTC 2021


The branch openssl-3.0 has been updated
       via  ea4d670a094a2b5daa13ad13db247653a224a17d (commit)
      from  f838730d15b6942d3fc401f73715c8789d05b385 (commit)


- Log -----------------------------------------------------------------
commit ea4d670a094a2b5daa13ad13db247653a224a17d
Author: x2018 <xkernel.wang at foxmail.com>
Date:   Tue Nov 23 19:25:43 2021 +0800

    check the return value of OPENSSL_strdup to prevent potential memory access error
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Tomas Mraz <tomas at openssl.org>
    Reviewed-by: Paul Dale <pauli at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/17110)
    
    (cherry picked from commit dc7e42c6a12637bae1660561d3f4cef039001475)

-----------------------------------------------------------------------

Summary of changes:
 apps/lib/engine_loader.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/lib/engine_loader.c b/apps/lib/engine_loader.c
index 2b4480000c..573af76024 100644
--- a/apps/lib/engine_loader.c
+++ b/apps/lib/engine_loader.c
@@ -91,7 +91,7 @@ static OSSL_STORE_LOADER_CTX *engine_open(const OSSL_STORE_LOADER *loader,
         keyid = OPENSSL_strdup(q + 1);
     }
 
-    if (e != NULL)
+    if (e != NULL && keyid != NULL)
         ctx = OSSL_STORE_LOADER_CTX_new(e, keyid);
 
     if (ctx == NULL) {


More information about the openssl-commits mailing list