[openssl/openssl] 154108: Coverity 1545176: dereference before NULL check

Pauli noreply at github.com
Mon Oct 2 08:20:28 UTC 2023


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 15410839c668f97b5c03ee1a1bc1a2bf4315715f
      https://github.com/openssl/openssl/commit/15410839c668f97b5c03ee1a1bc1a2bf4315715f
  Author: Pauli <pauli at openssl.org>
  Date:   2023-10-02 (Mon, 02 Oct 2023)

  Changed paths:
    M crypto/rand/rand_lib.c

  Log Message:
  -----------
  Coverity 1545176: dereference before NULL check

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
(Merged from https://github.com/openssl/openssl/pull/22211)


  Commit: eaf08794398ac3caaadffcfd670854bf51f610fa
      https://github.com/openssl/openssl/commit/eaf08794398ac3caaadffcfd670854bf51f610fa
  Author: Pauli <pauli at openssl.org>
  Date:   2023-10-02 (Mon, 02 Oct 2023)

  Changed paths:
    M providers/implementations/rands/test_rng.c

  Log Message:
  -----------
  Coverity 1545174: calling risky function

Remove the call to rand() and replace with an xor-shift RNG.
There are no security implications to worry about here.  This RNG is
used during testing only.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
(Merged from https://github.com/openssl/openssl/pull/22211)


  Commit: 6bd07949e54f9958eb8a0f9a597ceb3910753ab0
      https://github.com/openssl/openssl/commit/6bd07949e54f9958eb8a0f9a597ceb3910753ab0
  Author: Pauli <pauli at openssl.org>
  Date:   2023-10-02 (Mon, 02 Oct 2023)

  Changed paths:
    M crypto/rand/rand_lib.c

  Log Message:
  -----------
  Coverity 1545175: use after free

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
(Merged from https://github.com/openssl/openssl/pull/22211)


Compare: https://github.com/openssl/openssl/compare/8ed76c62b5d3...6bd07949e54f


More information about the openssl-commits mailing list