Re: [openssl-dev] [openssl.org #4107] [PATCH] null pointer dereference: bn_wexpand return code not checked in bn_g2fm.c

2015-10-29 Thread Kurt Roeckx via RT 
On Mon, Oct 26, 2015 at 10:29:43AM +, Pascal Cuoq via RT wrote:
> If the calls to bn_wexpand() are guarded as in the attached patch, the null 
> pointer dereferences no longer occur.

The patch has been applied.


Kurt


___
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] [openssl.org #4107] [PATCH] null pointer dereference: bn_wexpand return code not checked in bn_g2fm.c

2015-10-26 Thread Pascal Cuoq via RT 
The function bn_wexpand() can fail. Most of the invocations in bn_g2fm.c are 
guarded, but three of them aren't, causing a null pointer dereference when 
bn_wexpand() fails:

https://github.com/openssl/openssl/blob/3f6c7691870d1cd2ad0e0c83638cef3f35a0b548/crypto/bn/bn_gf2m.c#L700

If the calls to bn_wexpand() are guarded as in the attached patch, the null 
pointer dereferences no longer occur.




bn_wexpand.patch
Description: Binary data
___
openssl-bugs-mod mailing list
openssl-bugs-...@openssl.org
https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod___
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev