[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openssl-dev
Subject:    Re: Patch: fix a crash in the GOST engine
From:       "Dr. Stephen Henson" <steve () openssl ! org>
Date:       2010-02-16 14:31:06
Message-ID: 20100216143106.GA88441 () openssl ! org
[Download RAW message or body]

On Tue, Feb 16, 2010, Dmitry Ivanov wrote:

> Hi there!
> 
> I'm using the GOST engine to sign files on an ARM platform and I got a
> crash with bt pointing to the GOST engine. When gost2001_do_sign()
> fails for some reason (missing /dev/urandom in my case) it doesn't set
> 'newsig' to NULL and hence returns a dangling pointer.
> pkey_gost01_cp_sign()
> gets misled by it and everything goes downhill from there.
> 

Patch applied thanks for reporting this.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majordomo@openssl.org
[prev in list] [next in list] [prev in thread] [next in thread]