Bug 4600 - openssl: potential NULL pointer dereference in several place
Summary: openssl: potential NULL pointer dereference in several place
Status: RESOLVED FIXED
Alias: None
Product: General Runtime
Classification: Runtime
Component: General Runtime (show other bugs)
Version: unspecified
Hardware: x86 Multiple
: Medium normal
Target Milestone: 1.5
Assignee: Xufeng Zhang
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2013-06-04 05:20 UTC by Xufeng Zhang
Modified: 2014-04-24 03:24 UTC (History)
1 user (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Xufeng Zhang 2013-06-04 05:20:17 UTC 
There are several potential NULL pointer dereference in:
1). crypto/evp/digest.c: EVP_DigestInit_ex()
2). crypto/dh/dh_ameth.c: dh_pub_encode()
3). crypto/dsa/dsa_ameth.c: dsa_pub_encode()

No test case is available to reproduce these problems.
Comment 1 Saul Wold 2013-06-04 16:55:53 UTC 
Have you reported these to the upstream project?
Comment 2 Xufeng Zhang 2013-06-05 02:55:10 UTC 
>>Have you reported these to the upstream project?
No, I haven't reported these to openssl upstream.
Comment 3 Xufeng Zhang 2014-04-24 03:24:53 UTC 
Patch has already been merged.