Hi

The GOST HMAC code using NID_id_GostR3411_94 will segfault if you use
HMAC_Update with zero length input data.

Here is some pseudocode emulating the behavior in our test code:
HMAC_Init(ctx, key, size, hash);
HMAC_Update(ctx, data1, 567);
HMAC_Update(ctx, data2, 457);
HMAC_Update(ctx, NULL, 0);  /* Will segfault */
HMAC_Final(ctx, result, len);

Using "OpenSSL 1.0.1 14 Mar 2012" on Ubuntu 12.04, but I have also tried
with the latest code from GitHub and it also fails.

// Rickard

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to