[openssl] openssl-3.0 update

Dr. Paul Dale pauli at openssl.org
Fri Oct 1 01:04:39 UTC 2021


The branch openssl-3.0 has been updated
       via  ff8f2d07823c9373d9d6303e37b7650563e87cde (commit)
      from  394263c4424c04408b11143c596c2f657e6a3e97 (commit)


- Log -----------------------------------------------------------------
commit ff8f2d07823c9373d9d6303e37b7650563e87cde
Author: Viktor Dukhovni <openssl-users at dukhovni.org>
Date:   Wed Sep 29 18:03:13 2021 -0400

    Fully initialise cipher/digest app handles
    
    This avoids a crash in e.g. `openssl chacha20` as reported by
    Steffen Nurpmeso on openssl-users.
    
    Resolves: #16713
    
    Reviewed-by: Tomas Mraz <tomas at openssl.org>
    Reviewed-by: Paul Dale <pauli at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/16714)
    
    (cherry picked from commit a8cc0efe0d8fdd7bfa1d40b3c008d7d6ddf970db)

-----------------------------------------------------------------------

Summary of changes:
 apps/openssl.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apps/openssl.c b/apps/openssl.c
index 30e1e755e0..2693350ffc 100644
--- a/apps/openssl.c
+++ b/apps/openssl.c
@@ -395,6 +395,7 @@ static int do_cmd(LHASH_OF(FUNCTION) *prog, int argc, char *argv[])
 
     if (argc <= 0 || argv[0] == NULL)
         return 0;
+    memset(&f, 0, sizeof(f));
     f.name = argv[0];
     fp = lh_FUNCTION_retrieve(prog, &f);
     if (fp == NULL) {


More information about the openssl-commits mailing list