[openssl-dev] req command crashes using config file containing passwords

[Michel]

Hi,

 

I have some tests scripts that were working well with 1.0.2 and are crashing
using v1.1 (Windows 7).

 

They are failing when calling the 'req' command with a configure script
containing input_password/output password :

 

openssl req -new -batch -key RootCA.key -out RootCA.csr -config RootCA.cnf 

 

"Access violation reading location . "(when freeing output password)

 

here under the call stack :

openssl.exe!CheckBytes(unsigned char * pb, unsigned char bCheck, unsigned
int nSize) Line 1696       C++

openssl.exe!_free_dbg_nolock(void * pUserData, int nBlockUse) Line 1300
C++

openssl.exe!_free_dbg(void * pUserData, int nBlockUse) Line 1265     C++

openssl.exe!free(void * pUserData) Line 49      C++

openssl.exe!CRYPTO_free(void * str, const char * file, int line) Line 226
C

openssl.exe!req_main(int argc, char * * argv) Line 866                C

openssl.exe!do_cmd(lhash_st_FUNCTION * prog, int argc, char * * argv) Line
620        C

openssl.exe!main(int argc, char * * argv) Line 324          C

 

Let me know if I can help more.

 

Regards,

 

Michel.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160229/c09f047c/attachment.html>