On Thu, Apr 01, 2010 at 12:30:26PM +0200, Stephen Henson via RT wrote:
> An OpenSSL 0.9.9 snapshot is over a year old.

Some of the 1.0.0 code have been integrated in the NetBSD code
(but not all of them, obviously).

> I've seen some crashes in
> that area in 0.9.9 but at least some have been fixed since then. Can you
> check against 1.0.0 release?

I can (although that's not easy), but do you know what could prevent
users of handshake_dgst from being called with a NULL handshake_dgst ?
I looked at the 1.0.0 code and didn't find any change could prevent
this from happening.

-- 
Manuel Bouyer <[email protected]>
     NetBSD: 26 ans d'experience feront toujours la difference
--
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to