Re: NPE on malloc in ssl/d1_both.c, ssl/s3_enc.c, ssl/sll_ciph.c, ssl/ssl_sess.c, ssl/t1_lib.c

2014-06-14 Thread dcruette
Kurt Well I am not a C expert, for the moment I'll leave the development team do this ! Didier Le 14.06.2014 00:51, Kurt Roeckx a écrit : On Thu, Jun 12, 2014 at 08:05:52PM +0200, dcrue...@qualitesys.com wrote: Thanks Kurt I found ssl/t1_lib.c but not ssl/d1_both.c, ssl/s3_enc.c,

Re: NPE on malloc in ssl/d1_both.c, ssl/s3_enc.c, ssl/sll_ciph.c, ssl/ssl_sess.c, ssl/t1_lib.c

2014-06-13 Thread Kurt Roeckx
On Thu, Jun 12, 2014 at 08:05:52PM +0200, dcrue...@qualitesys.com wrote: Thanks Kurt I found ssl/t1_lib.c but not ssl/d1_both.c, ssl/s3_enc.c, ssl/sll_ciph.c, ssl/ssl_sess.c in pull request #131 So can you make patches for those issues and then open a bug in RT about it? Kurt

Re: NPE on malloc in ssl/d1_both.c, ssl/s3_enc.c, ssl/sll_ciph.c, ssl/ssl_sess.c, ssl/t1_lib.c

2014-06-12 Thread dcruette
Thanks Kurt I found ssl/t1_lib.c but not ssl/d1_both.c, ssl/s3_enc.c, ssl/sll_ciph.c, ssl/ssl_sess.c in pull request #131 Didier Le 10.06.2014 23:49, Kurt Roeckx a écrit : On Tue, Jun 10, 2014 at 11:29:02PM +0200, dcrue...@qualitesys.com wrote: Hello In version openssl-1.0.h In case of

NPE on malloc in ssl/d1_both.c, ssl/s3_enc.c, ssl/sll_ciph.c, ssl/ssl_sess.c, ssl/t1_lib.c

2014-06-10 Thread dcruette
Hello In version openssl-1.0.h In case of malloc error, the buffer is not tested here In ssl/d1_both.c int dtls1_process_heartbeat(SSL *s) { . /* Allocate memory for the response, size is 1 byte * message type, plus 2 bytes payload length, plus

Re: NPE on malloc in ssl/d1_both.c, ssl/s3_enc.c, ssl/sll_ciph.c, ssl/ssl_sess.c, ssl/t1_lib.c

2014-06-10 Thread Kurt Roeckx
On Tue, Jun 10, 2014 at 11:29:02PM +0200, dcrue...@qualitesys.com wrote: Hello In version openssl-1.0.h In case of malloc error, the buffer is not tested here I think there are already patches available for most of those issues. See github pull request #131. Kurt