SIGSEGV from EVP_MAC_CTX_get_mac_size()

[James Muir]

On 2023-11-27 20:35, Hal Murray wrote:
> Thanks.
> 
>> Do you check the return value of EVP_MAC_CTX_get_mac_size()?
> 
> Nope, that's where it is crashing.
> 
> 
>> Note that EVP_MAC_CTX_get_mac_size() does not seem to be called in the
>> back-trace you listed.
> 
> I noticed that and assumed it was some compiler magic.
> 
> Attached is my test program.

I can reproduce the seg-fault using your code (I am working from the 
"master" branch).

Looks like a bug to me.

It is unusual to call EVP_MAC_CTX_get_mac_size() without first calling 
EVP_MAC_init(), but the code should handle that (and return 0, as per 
the documentation).

Would you be able to open an issue for this?

https://github.com/openssl/openssl/issues