[openssl/openssl] c85827: Add check for xor_get_aid()

[JiashengJiang]

  Branch: refs/heads/openssl-3.2
  Home:   https://github.com/openssl/openssl
  Commit: c85827b2cc089b34f0d02a3fbf8e67d49cb82b17
      https://github.com/openssl/openssl/commit/c85827b2cc089b34f0d02a3fbf8e67d49cb82b17
  Author: Jiasheng Jiang <jiasheng at purdue.edu>
  Date:   2024-03-12 (Tue, 12 Mar 2024)

  Changed paths:
    M test/tls-provider.c

  Log Message:
  -----------
  Add check for xor_get_aid()

Add check for the return value of xor_get_aid() in order to avoid NULL pointer deference.

For example, "algor" could be NULL if the allocation of X509_ALGOR_new() fails. As a result, i2d_X509_ALGOR() will return 0 and "ctx->aid" will be an invalid value NULL.

Fixes: f4ed6eed2c ("SSL_set1_groups_list(): Fix memory corruption with 40 groups and more")
Signed-off-by: Jiasheng Jiang <jiasheng at purdue.edu>

Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23764)

(cherry picked from commit bc930bed20d7462afecbb9d947286a335975c04a)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications