[openssl/openssl] e554f9: Uninitialized array variable

shashankmca80 noreply at github.com
Fri Jan 19 13:06:53 UTC 2024


  Branch: refs/heads/openssl-3.2
  Home:   https://github.com/openssl/openssl
  Commit: e554f9f24918a9f2050434b01c531c636408da4f
      https://github.com/openssl/openssl/commit/e554f9f24918a9f2050434b01c531c636408da4f
  Author: shashankmca80 <38880505+shashankmca80 at users.noreply.github.com>
  Date:   2024-01-19 (Fri, 19 Jan 2024)

  Changed paths:
    M test/siphash_internal_test.c

  Log Message:
  -----------
  Uninitialized array variable

array"key" is uninitialized and it is being read directly in function SipHash_Init() as per the below statements making a way for the garbage values :
uint64_t k0 = U8TO64_LE(k);
uint64_t k1 = U8TO64_LE(k + 8);

CLA: trivial

Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23298)

(cherry picked from commit a0826b184eed2dccc56cdf80e3e0bc061cc89ddc)




More information about the openssl-commits mailing list