[openssl-dev] [openssl.org #4107] [PATCH] null pointer dereference: bn_wexpand return code not checked in bn_g2fm.c

Kurt Roeckx via RT rt at openssl.org
Thu Oct 29 19:44:18 UTC 2015


On Mon, Oct 26, 2015 at 10:29:43AM +0000, Pascal Cuoq via RT wrote:
> If the calls to bn_wexpand() are guarded as in the attached patch, the null pointer dereferences no longer occur.

The patch has been applied.


Kurt




More information about the openssl-dev mailing list