Branch: refs/heads/openssl-3.0
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 76e18f94a9de17c5720b80c78cc453fae572fb62
      
https://github.openssl.org/openssl/openssl/commit/76e18f94a9de17c5720b80c78cc453fae572fb62
  Author: Zhou Qingyang <[email protected]>
  Date:   2022-05-16 (Mon, 16 May 2022)

  Changed paths:
    M ssl/ssl_rsa.c

  Log Message:
  -----------
  Add return value check of EVP_PKEY_copy_parameters () in 
ssl_set_cert_and_key()

It seems the return value of EVP_PKEY_copy_parameters() in
ssl_set_cert_and_key(), and could lead to null pointer dereference in
EVP_PKEY_eq() function.

However those functions are complicated and this fix is suggested by
a static analyzer, so please advise.

Reviewed-by: Dmitry Belyavskiy <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
(Merged from https://github.com/openssl/openssl/pull/18071)

(cherry picked from commit 6646e015a50e5455117c22a27032011689db710f)


Reply via email to