[openssl] OpenSSL_1_1_1-stable update

Dr. Paul Dale pauli at openssl.org
Thu Oct 28 08:08:45 UTC 2021


The branch OpenSSL_1_1_1-stable has been updated
       via  886e6855c3fd5ea977b36afea5a2aa31b7cdd01c (commit)
      from  c03fa13e4ab4c27ef22284e56e6ddb43798e5874 (commit)


- Log -----------------------------------------------------------------
commit 886e6855c3fd5ea977b36afea5a2aa31b7cdd01c
Author: Pauli <pauli at openssl.org>
Date:   Wed Oct 27 08:30:51 2021 +1000

    speed: range check the argument given to -multi for 1.1.1
    
    Fixes #16899 for 1.1.1 branch.
    
    Reviewed-by: Tomas Mraz <tomas at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/16922)

-----------------------------------------------------------------------

Summary of changes:
 apps/speed.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apps/speed.c b/apps/speed.c
index d4ae7ab7bf..7f2d3165f9 100644
--- a/apps/speed.c
+++ b/apps/speed.c
@@ -1590,6 +1590,10 @@ int speed_main(int argc, char **argv)
         case OPT_MULTI:
 #ifndef NO_FORK
             multi = atoi(opt_arg());
+            if (multi >= INT_MAX / (int)sizeof(int)) {
+                BIO_printf(bio_err, "%s: multi argument too large\n", prog);
+                return 0;
+            }
 #endif
             break;
         case OPT_ASYNCJOBS:


More information about the openssl-commits mailing list