[openssl.org #393] 0.9.7 beta 5 crypto/x509/x509_vfy.c X509_STORE_CTX_init() memset required

2002-12-10 Thread Richard Levitte via RT
Nope, no reversing there. However, what we're cleansing is the pointer itself, which is basically ridiculous and a mistake, as the memset() that was there before (and didn't generate an exception!) was really there to NULLify the ex_data pointers. I just committed a change back to using

[openssl.org #393] 0.9.7 beta 5 crypto/x509/x509_vfy.c X509_STORE_CTX_init() memset required

2002-12-09 Thread Jeffrey Altman via RT
Please ignore my previous e-mail, the problem is located in X509_STORE_CTX_init() The memset((ctx-ex_data),0,sizeof(CRYPTO_EX_DATA)) that was commented out needs to be restored due to the use of OPENSSL_cleanse() on that data structure. In previous releases this data structure would have