[openssl/openssl] 60dc12: Fix arithmetic expression overflow

JohnnySavages noreply at github.com
Mon Jan 15 09:51:58 UTC 2024


  Branch: refs/heads/openssl-3.1
  Home:   https://github.com/openssl/openssl
  Commit: 60dc128b0f4ab0fec8198ce1724160d0750273b0
      https://github.com/openssl/openssl/commit/60dc128b0f4ab0fec8198ce1724160d0750273b0
  Author: Drokov Pavel <drokov at rutoken.ru>
  Date:   2024-01-15 (Mon, 15 Jan 2024)

  Changed paths:
    M crypto/objects/obj_dat.c

  Log Message:
  -----------
  Fix arithmetic expression overflow

If the value of a->length is large (>= 2^12), then an integer overflow will
occur for the signed type, which according to the C standard is UB.

CLA: trivial

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23274)

(cherry picked from commit 486ab0fb003d05f89620662260486d31bd3faa8c)




More information about the openssl-commits mailing list