I've found that some tests for ccgost engine segfaults on Solaris/Sparc.
Investigation shows that segfault happen wnen i2d_PrivateKey function
calls function, pointed by old_priv_encode field in ASN1_METHOD
structure

This field is commented in the crypto/asn1/asn1/asn1_locl.h as
/* Legacy functions for old PEM */
but it is not initialized to NULL in EVP_PKEY_ASN1_new, and no
function to set this field is provided.

On most platforms it doesn't matter for some unknown reason (may be
OPENSSL_malloc initializes memory to zero, but I don't understand why) 

but sometimes it does result in dereferencing uninitialized memory

Fixing this problem is simple - just initialize these pointers to zero
in EVP_PKEY_ASN1_new
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to