[openssl.org #2400] [Bug Report and Patch] Missing initialization in ASN1_STRING_to_UTF8

[Raphael Spreitzer via RT]

Hi,

when calling X509 encoding and decoding functions, namely d2i_X509(3)
valgrind always complains about a "Conditional jump or move depends on
uninitialised value"
at ASN1_STRING_set, and an "Uninitialised value was created by a stack
allocation" error at ASN1_STRING_to_UTF8.

This problem can be observed in openssl-1.0.0a, as well as openssl-1.0.0c.

In order to fix the problem the generated ASN1_STRING stmp, within the
function
int ASN1_STRING_to_UTF8(...) (file a_strex.c), should be initialized via the
following block of code:

// Init generated ASN1_STRING
stmp.length=0;
stmp.data=NULL;
stmp.flags=0;


Kind regards,
Raphael Spreitzer

Hi,

when calling X509 encoding and decoding functions, namely d2i_X509(3)
valgrind always complains about a "Conditional jump or move depends on uninitialised value"
at ASN1_STRING_set, and an "Uninitialised value was created by a stack allocation" error at ASN1_STRING_to_UTF8.

This problem can be observed in openssl-1.0.0a, as well as openssl-1.0.0c.

In order to fix the problem the generated ASN1_STRING stmp, within the function
int ASN1_STRING_to_UTF8(...) (file a_strex.c), should be initialized via the following block of code:

// Init generated ASN1_STRING
stmp.length=0;
stmp.data=""
stmp.flags=0;


Kind regards,
Raphael Spreitzer