[openssl-dev] [openssl.org #3816] Call of memcmp with null pointers in obj_cmp()

2015-05-13 Thread Matt Caswell via RT
Patch applied. Many thanks. Matt ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] [openssl.org #3816] Call of memcmp with null pointers in obj_cmp()

2015-04-21 Thread Hanno Boeck via RT
The function obj_cmp() (file crypto/objects/obj_dat.c) can in some situations call memcmp() with a null pointer and a zero length. This is invalid behaviour. When compiling openssl with undefined behaviour sanitizer (add -fsanitize=undefined to compile flags) this can be seen. One example that