The branch master has been updated
via 47695810b3bea3e83e8bc2266e1672676a189efd (commit)
from 867a917032e3eaff7b13d5f68063997f27ca26aa (commit)
- Log -----------------------------------------------------------------
commit 47695810b3bea3e83e8bc2266e1672676a189efd
Author: Matt Caswell <[email protected]>
Date: Thu May 25 15:18:22 2017 +0100
Document that HMAC() with a NULL md is not thread safe
Fixes #3541
Reviewed-by: Rich Salz <[email protected]>
(Merged from https://github.com/openssl/openssl/pull/3553)
-----------------------------------------------------------------------
Summary of changes:
doc/man3/HMAC.pod | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/doc/man3/HMAC.pod b/doc/man3/HMAC.pod
index 42f0bfd..ad7aaeb 100644
--- a/doc/man3/HMAC.pod
+++ b/doc/man3/HMAC.pod
@@ -60,7 +60,8 @@ B<key_len> bytes long.
It places the result in B<md> (which must have space for the output of
the hash function, which is no more than B<EVP_MAX_MD_SIZE> bytes).
If B<md> is NULL, the digest is placed in a static array. The size of
-the output is placed in B<md_len>, unless it is B<NULL>.
+the output is placed in B<md_len>, unless it is B<NULL>. Note: passing a NULL
+value for B<md> to use the static array is not thread safe.
B<evp_md> can be EVP_sha1(), EVP_ripemd160() etc.
_____
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits
