<div dir="ltr">Hello,<div><br></div><div>I was able to setup CodeQL for the GOST engine. As it fetches OpenSSL alpha 6, I got able to see the results.</div><div><br></div><div>======</div><div>openssl/test/cmp_hdr_test.c#L181<br>Call to gmtime is potentially dangerous<br><br>openssl/test/cmp_hdr_test.c#L171 <br>Call to gmtime is potentially dangerous<br><br>openssl/test/asn1_time_test.c#L398 <br>Call to localtime is potentially dangerous<br><br>openssl/crypto/ec/curve448/curve448.c#L583 <br>Multiplication result may overflow 'int' before it is converted to 'unsigned long'.<br><br>openssl/crypto/asn1/a_time.c#L250 <br>Multiplication result may overflow 'int' before it is converted to 'long'.<br></div><div>======<br></div><div><br></div><div>I can submit a PR providing the CodeQL scan for the master branch if the Team thinks it is useful.</div><div>But I strongly suppose that someone will have to configure the OpenSSL github project to enable it.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Oct 2, 2020 at 6:30 PM Dmitry Belyavsky <<a href="mailto:beldmit@gmail.com">beldmit@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">As setting up openssl master is required to build gost-engine, I'll have to.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Oct 2, 2020 at 4:29 PM Dr. Matthias St. Pierre <<a href="mailto:Matthias.St.Pierre@ncp-e.com" target="_blank">Matthias.St.Pierre@ncp-e.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="DE">
<div>
<p class="MsoNormal"><span lang="EN-US">>
</span><span lang="EN-US">Do you have ideas on how to properly set it up?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Congratulations, Dmitry! You just won the price of being assigned
the job to figure it out.<span> </span>;-)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Matthias<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p style="font-size:10pt;font-family:Calibri,Arial"><span style="font-size:11pt"></span> </p>
<p style="font-size:10pt;font-family:Calibri,Arial"><span style="font-size:11pt">
</span></p><table style="height:342px;width:620px">
<tbody>
<tr>
<td style="font-size:11pt;height:127px;font-family:Calibri,Arial;width:171px" valign="top">
<span style="font-size:11pt"><span style="font-size:11pt"><span style="font-size:11pt"><span style="font-size:11pt"><strong><img style="height: 56px; width: 154px;" border="0" alt="NCP engingeering GmbH" src="cid:174e9ef49288334e7f91" width="153" height="56"></strong></span></span></span></span></td>
<td style="font-size:11pt;height:25px;font-family:Calibri,Arial;width:12px" valign="top">
<span style="font-size:11pt"><span style="font-size:11pt"><strong></strong></span></span></td>
<td style="font-size:11pt;height:25px;font-family:Calibri,Arial;width:501px" valign="top">
<span style="font-size:11pt"><span style="font-size:11pt"><strong>Dr. Matthias St. Pierre</strong>
<br>
<span style="font-size:11pt"><span style="font-size:11pt"><br>
Senior Software Engineer <br>
<a href="mailto:matthias.st.pierre@ncp-e.com" target="_blank">matthias.st.pierre@ncp-e.com</a> <br>
Phone: +49 911 9968-0<br>
<a href="http://www.ncp-e.com" target="_blank">www.ncp-e.com</a> </span></span></span></span></td>
</tr>
<tr>
<td style="font-size:11pt;height:25px;font-family:Calibri,Arial;width:684px" valign="top" colspan="3">
<p style="font-size:10pt;font-family:Calibri,Arial"><strong><br>
Follow us on:</strong> <a title="" href="https://www.facebook.com/NCPengineering" target="_blank">Facebook</a> |
<a href="https://twitter.com/NCP_engineering" target="_blank">Twitter</a> | <a href="https://www.xing.com/companies/ncpengineeringgmbh" target="_blank">
Xing</a> | <a href="https://www.youtube.com/user/NCPengineeringGmbH" target="_blank">YouTube</a> |
<a href="http://www.linkedin.com/company/ncp-engineering-inc.?trk=cws-cpw-coname-0-0" target="_blank">
LinkedIn</a><br>
<br>
<strong>Headquarters Germany: </strong>NCP engineering GmbH • Dombuehler Str. 2 • 90449 • Nuremberg
<br>
<strong>North American HQ:</strong> NCP engineering Inc. • 601 Cleveland Str., Suite 501-25 • Clearwater, FL 33755
<br>
<br>
Authorized representatives: Peter Soell, Patrick Oliver Graf, Beate Dietrich <br>
Registry Court: Lower District Court of Nuremberg <br>
Commercial register No.: HRB 7786 Nuremberg, VAT identification No.: DE 133557619
<span style="font-family:Calibri"></span></p>
<p style="font-size:10pt;font-family:Calibri,Arial"><span style="font-size:7pt;font-family:Calibri,Arial"><font style="font-size:7pt" color="#727272">This e-mail message including any attachments is for the sole use of the intended recipient(s) and
may contain privileged or confidential information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please immediately contact the sender by reply e-mail and delete the original message and destroy
all copies thereof.</font> </span></p>
</td>
</tr>
</tbody>
</table>
<span style="font-family:Arial"></span><p></p>
<span style="font-size:12pt"></span><span style="font-family:"Times New Roman""><span style="font-size:12pt"></span></span><span style="font-family:Arial"><span style="font-size:12pt"><a href="https://www.ncp-e.com/de/aktuelles/events/veranstaltungen" target="_blank"></a></span></span><a title="" href="https://www.ncp-e.com/de/aktuelles/events/veranstaltungen" target="_blank"></a>
<p style="font-size:10pt;font-family:Arial"></p>
<p style="font-size:10pt;font-family:Arial"></p>
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><span><b><span>From</span></b></span><b><span>:</span></b><span> openssl-project
<<a href="mailto:openssl-project-bounces@openssl.org" target="_blank">openssl-project-bounces@openssl.org</a>> <b>On Behalf Of </b>Dmitry Belyavsky<br>
<b>Sent:</b> Friday, October 2, 2020 2:51 PM<br>
<b>To:</b> Dr Paul Dale <<a href="mailto:paul.dale@oracle.com" target="_blank">paul.dale@oracle.com</a>><br>
<b>Cc:</b> <a href="mailto:openssl-project@openssl.org" target="_blank">openssl-project@openssl.org</a><br>
<b>Subject:</b> Re: Would this be interesting to the project?<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Do you have ideas on how to properly set it up?<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Thu, Oct 1, 2020 at 11:36 AM Dr Paul Dale <<a href="mailto:paul.dale@oracle.com" target="_blank">paul.dale@oracle.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p class="MsoNormal"><a href="https://github.blog/2020-09-30-code-scanning-is-now-available/" target="_blank">https://github.blog/2020-09-30-code-scanning-is-now-available/</a><u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Pauli<u></u><u></u></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica,sans-serif;color:black">-- <br>
Dr Paul Dale | Distinguished Architect | Cryptographic Foundations <br>
Phone +61 7 3031 7217<br>
Oracle Australia<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica,sans-serif;color:black"><u></u> <u></u></span></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<p class="MsoNormal">SY, Dmitry Belyavsky<u></u><u></u></p>
</div>
</div>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr">SY, Dmitry Belyavsky</div>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature">SY, Dmitry Belyavsky</div>