[openssl/openssl] 18a30b: store/store_lib.c: Add the checks for the EVP_MD_C...

[JiashengJiang]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 18a30b5637cfaed0830183c1572cac76cfa40b4b
      https://github.com/openssl/openssl/commit/18a30b5637cfaed0830183c1572cac76cfa40b4b
  Author: Jiasheng Jiang <jiasheng at purdue.edu>
  Date:   2024-04-01 (Mon, 01 Apr 2024)

  Changed paths:
    M crypto/store/store_lib.c

  Log Message:
  -----------
  store/store_lib.c: Add the checks for the EVP_MD_CTX_get_size()

Add the checks for the return value of EVP_MD_CTX_get_size() before explicitly cast them to size_t to avoid the integer overflow.

Fixes: fac8673b8a ("STORE: Add the possibility to search for specific information")
Signed-off-by: Jiasheng Jiang <jiasheng at purdue.edu>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23955)


  Commit: 99fe4c10664c2287d34145457823edff3782e413
      https://github.com/openssl/openssl/commit/99fe4c10664c2287d34145457823edff3782e413
  Author: Jiasheng Jiang <jiasheng at purdue.edu>
  Date:   2024-04-01 (Mon, 01 Apr 2024)

  Changed paths:
    M crypto/store/store_lib.c

  Log Message:
  -----------
  Add OPENSSL_free to avoid mem leak

Signed-off-by: Jiasheng Jiang <jiasheng at purdue.edu>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23955)


Compare: https://github.com/openssl/openssl/compare/15e06b12ee9d...99fe4c10664c

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications