Bug 4600

Summary:	openssl: potential NULL pointer dereference in several place
Product:	[Runtime] General Runtime	Reporter:	Xufeng Zhang <xufeng.zhang>
Component:	General Runtime	Assignee:	Xufeng Zhang <xufeng.zhang>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Medium	CC:	sgw
Version:	unspecified
Target Milestone:	1.5
Hardware:	x86
OS:	Multiple
Whiteboard:
OS type for building Yocto:	---	Type of Regression:	---
Verified:		Documentation change:	No (bug/feature does not impact docs)

Description Xufeng Zhang 2013-06-04 05:20:17 UTC

There are several potential NULL pointer dereference in:
1). crypto/evp/digest.c: EVP_DigestInit_ex()
2). crypto/dh/dh_ameth.c: dh_pub_encode()
3). crypto/dsa/dsa_ameth.c: dsa_pub_encode()

No test case is available to reproduce these problems.

Comment 1 Saul Wold 2013-06-04 16:55:53 UTC

Have you reported these to the upstream project?

Comment 2 Xufeng Zhang 2013-06-05 02:55:10 UTC

>>Have you reported these to the upstream project?
No, I haven't reported these to openssl upstream.

Comment 3 Xufeng Zhang 2014-04-24 03:24:53 UTC

Patch has already been merged.