in function  EVP_OpenInit (crypto/evp/p_open.c -- rev=1.9) "ret" is set
to "0" at the beginning and is changed upon successful completion to
"1".

In contrast the current documentation says at
"http://www.openssl.org/docs/crypto/EVP_OpenInit.html"

EVP_OpenInit() returns -1 on error or an non zero integer (actually the
recovered secret key size) if successful.

This is an especially nasty documentation bug as wrong error-checking
will cause SIGSEGVs by the function EVP_OpenUpdate (zero-dereference of
b=ctx->cipher->block_size;)
(A check for an invalid ctx might be appropriate (hint,hint,...;-)
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to