[openssl] openssl-3.0 update

Dr. Paul Dale pauli at openssl.org
Thu Nov 25 02:03:52 UTC 2021


The branch openssl-3.0 has been updated
       via  dd0c0eb7a54aed1d0b8b71ad22253558dc26d646 (commit)
      from  ea4d670a094a2b5daa13ad13db247653a224a17d (commit)


- Log -----------------------------------------------------------------
commit dd0c0eb7a54aed1d0b8b71ad22253558dc26d646
Author: x2018 <xkernel.wang at foxmail.com>
Date:   Tue Nov 23 21:33:17 2021 +0800

    check the return value of OPENSSL_strdup(CRYPTO_strdup) to prevent potential memory access error
    
    Reviewed-by: Tomas Mraz <tomas at openssl.org>
    Reviewed-by: Paul Dale <pauli at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/17113)
    
    (cherry picked from commit b9648f31a4917b8594caebda3e6d8d313514fe24)

-----------------------------------------------------------------------

Summary of changes:
 apps/lib/app_rand.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/apps/lib/app_rand.c b/apps/lib/app_rand.c
index e38d3a72fc..08550d7bfc 100644
--- a/apps/lib/app_rand.c
+++ b/apps/lib/app_rand.c
@@ -110,6 +110,8 @@ int opt_rand(int opt)
     case OPT_R_WRITERAND:
         OPENSSL_free(save_rand_file);
         save_rand_file = OPENSSL_strdup(opt_arg());
+        if (save_rand_file == NULL)
+            return 0;
         break;
     }
     return 1;


More information about the openssl-commits mailing list