Hi,

We encountered a segmentation fault in our engine code as 
EVP_CIPHER->cleanup() is called before EVP_CIPHER_CTX->cipher_data gets 
initialized by EVP_CIPHER->init().  This can be prevented if 
EVP_CIPHER_CTX->cipher_data is initialized with 0s after the allocation 
in EVP_CipherInit_ex().

Please refer to the following PR.
PR#277 Uninitialized memory causes segmentation fault

Thank you

-- misaki

-- 
Oracle Solaris Security - Austin, TX
Principal Software Engineer


_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Reply via email to