[openssl/openssl] f6801a: EVP_DigestUpdate(): Check if ctx->update is set

[Sashan]

  Branch: refs/heads/openssl-3.3
  Home:   https://github.com/openssl/openssl
  Commit: f6801a2ec0b5654c0660ffd0ec397eed4a4af95a
      https://github.com/openssl/openssl/commit/f6801a2ec0b5654c0660ffd0ec397eed4a4af95a
  Author: sashan <anedvedicky at gmail.com>
  Date:   2024-07-11 (Thu, 11 Jul 2024)

  Changed paths:
    M crypto/evp/digest.c
    M test/evp_extra_test.c

  Log Message:
  -----------
  EVP_DigestUpdate(): Check if ctx->update is set

The issue has been discovered by libFuzzer running on provider target.
There are currently three distinct reports which are addressed by
code change here.

    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69236#c1
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69243#c1
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69261#c1

the issue has been introduced with openssl 3.0.

Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24753)

(cherry picked from commit ad33d62396b7e9db04fdf060481ced394d391688)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications