[openssl/openssl] f5fde9: ts/ts_rsp_sign.c: Add the check for the EVP_MD_CTX...

[JiashengJiang]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: f5fde94c54a1ad49663391750fd1b2f47550a4b6
      https://github.com/openssl/openssl/commit/f5fde94c54a1ad49663391750fd1b2f47550a4b6
  Author: Jiasheng Jiang <jiasheng at purdue.edu>
  Date:   2024-04-09 (Tue, 09 Apr 2024)

  Changed paths:
    M crypto/ts/ts_rsp_sign.c

  Log Message:
  -----------
  ts/ts_rsp_sign.c: Add the check for the EVP_MD_CTX_get_size()

Add the check for the return value of EVP_MD_CTX_get_size() to avoid invalid negative numbers.

Fixes: c7235be6e3 ("RFC 3161 compliant time stamp request creation, response generation and response verification.")
Signed-off-by: Jiasheng Jiang <jiasheng at purdue.edu>

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23960)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications