[openssl/openssl] 56e63f: x509/x509_set.c: Add the check for the EVP_MD_CTX_...

[JiashengJiang]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 56e63f570bd5a479439bc6f6a2499f6b86ded341
      https://github.com/openssl/openssl/commit/56e63f570bd5a479439bc6f6a2499f6b86ded341
  Author: Jiasheng Jiang <jiasheng at purdue.edu>
  Date:   2024-03-30 (Sat, 30 Mar 2024)

  Changed paths:
    M crypto/x509/x509_set.c

  Log Message:
  -----------
  x509/x509_set.c: Add the check for the EVP_MD_CTX_get_size()

Add the check for the return value of EVP_MD_CTX_get_size() to avoid invalid negative numbers.

Fixes: 786dd2c22c ("Add support for custom signature parameters")
Signed-off-by: Jiasheng Jiang <jiasheng at purdue.edu>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23956)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications