[openssl/openssl] 9f6a48: ssl/t1_lib.c: Add checks for the EVP_MD_get_size()

[JiashengJiang]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 9f6a48749afdcd5f35fb671651fc6af2b0b7d97a
      https://github.com/openssl/openssl/commit/9f6a48749afdcd5f35fb671651fc6af2b0b7d97a
  Author: Jiasheng Jiang <jiasheng at purdue.edu>
  Date:   2024-04-02 (Tue, 02 Apr 2024)

  Changed paths:
    M ssl/t1_lib.c

  Log Message:
  -----------
  ssl/t1_lib.c: Add checks for the EVP_MD_get_size()

Add checks for the EVP_MD_get_size() to avoid unexpected negative numbers.

Fixes: b362ccab5c ("Security framework.")
Fixes: 0fe3db251a ("Use size of server key when selecting signature algorithm.")
Signed-off-by: Jiasheng Jiang <jiasheng at purdue.edu>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
(Merged from https://github.com/openssl/openssl/pull/23943)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications