[openssl-dev] [openssl.org #3841] Uninitialized memory causes segmentation fault

[Misaki.Miyashita via RT]

Hi,

We encountered a segmentation fault in our engine code as 
EVP_CIPHER->cleanup() is called before EVP_CIPHER_CTX->cipher_data gets 
initialized by EVP_CIPHER->init().  This can be prevented if 
EVP_CIPHER_CTX->cipher_data is initialized with 0s after the allocation 
in EVP_CipherInit_ex().

Please refer to the following PR.
PR#277 Uninitialized memory causes segmentation fault

Thank you

-- misaki

-- 
Oracle Solaris Security - Austin, TX
Principal Software Engineer