[openssl/openssl] bbb6d6: Fix regression in evp_test for provider compat CI

Neil Horman noreply at github.com
Sun Sep 17 11:05:31 UTC 2023


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: bbb6d620f6014274cb00a8186225447a2a114543
      https://github.com/openssl/openssl/commit/bbb6d620f6014274cb00a8186225447a2a114543
  Author: Neil Horman <nhorman at openssl.org>
  Date:   2023-09-17 (Sun, 17 Sep 2023)

  Changed paths:
    M test/evp_test.c

  Log Message:
  -----------
  Fix regression in evp_test for provider compat CI

If we ignore the faliure to copy on an old fips provider, we need to use
ctx_base, rather than ctx

Fixes #22076

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22102)


  Commit: 0ca5cf989101cae6ffeaef3518e99839fbccb9ba
      https://github.com/openssl/openssl/commit/0ca5cf989101cae6ffeaef3518e99839fbccb9ba
  Author: Neil Horman <nhorman at openssl.org>
  Date:   2023-09-17 (Sun, 17 Sep 2023)

  Changed paths:
    M providers/implementations/ciphers/cipher_aes_gcm.c
    M providers/implementations/ciphers/cipher_aria_ccm.c
    M providers/implementations/ciphers/cipher_aria_gcm.c
    M providers/implementations/ciphers/cipher_sm4_ccm.c
    M providers/implementations/ciphers/cipher_sm4_gcm.c

  Log Message:
  -----------
  Fix a key repointing in various ciphers

In the dupctx fixups I missed a pointer that needed to be repointed to
the surrounding structures AES_KEY structure for the sm4/aes/aria
ccm/gcm variants.  This caused a colliding use of the key and possible
use after free issues.

Fixes #22076

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22102)


Compare: https://github.com/openssl/openssl/compare/388a8e731445...0ca5cf989101


More information about the openssl-commits mailing list