CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/06/09 06:12:34
Modified files:
lib/libcrypto/cms: cms_pwri.c
Log message:
Avoid NULL dereference in password-based CMS decryption
The keyDerivationAlgorithm field is OPTIONAL in the ASN.1 but required
for password-based CMS. Check that the field is present before using it
to avoid a crash.
>From Igor Ustinov via OpenSSL
