Skip to content

Comments

apps/speed: fix possible OOB access in some EC arrays (1.1.0)#6245

Closed
FdaSilvaYY wants to merge 1 commit intoopenssl:OpenSSL_1_1_0-stablefrom
FdaSilvaYY:1-1-0-backport
Closed

apps/speed: fix possible OOB access in some EC arrays (1.1.0)#6245
FdaSilvaYY wants to merge 1 commit intoopenssl:OpenSSL_1_1_0-stablefrom
FdaSilvaYY:1-1-0-backport

Conversation

@FdaSilvaYY
Copy link
Contributor

Cherry-picked from commit 5c6a69f.

Partial Back-port of #6133 to 1.1.0

Checklist
  • documentation is added or updated
  • tests are added or updated

@FdaSilvaYY
Copy link
Contributor Author

As #6133 don't cherry-pick cleanly, I have to do some adjustments ;)

@FdaSilvaYY
Copy link
Contributor Author

ping @dot-asm , @richsalz :)
Red cross from Travis CI is unrelated : /usr/bin/ld: unrecognized option '--push-state--no-as-needed

apps/speed.c Outdated
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While we are at it, I'd suggest to fix formatting as

typedef void *(*kdf_fn)(const void *in, size_t inlen, void *out,
                        size_t *xoutlen);

@FdaSilvaYY FdaSilvaYY force-pushed the 1-1-0-backport branch 2 times, most recently from c6c5126 to 9f36894 Compare May 15, 2018 17:58
because there are actually 17 curves defined, but only 16 are plugged for
ecdsa test.
Deduce array size using OSSL_NELEM and so remove various magic numbers,
which required some declarations moving.
Implement OPT_PAIR list search without a null-ending element.
Fix some comparison between signed and unsigned integer expressions.

cherry-picking from commit 5c6a69f.

Partial Back-port of openssl#6133 to 1.1.0
@dot-asm dot-asm added 1.1.0 approval: review pending This pull request needs review by a committer labels May 15, 2018
@richsalz richsalz added approval: done This pull request has the required number of approvals and removed approval: review pending This pull request needs review by a committer labels May 15, 2018
levitte pushed a commit that referenced this pull request May 18, 2018
because there are actually 17 curves defined, but only 16 are plugged for
ecdsa test.
Deduce array size using OSSL_NELEM and so remove various magic numbers,
which required some declarations moving.
Implement OPT_PAIR list search without a null-ending element.
Fix some comparison between signed and unsigned integer expressions.

cherry-picking from commit 5c6a69f.

Partial Back-port of #6133 to 1.1.0

Reviewed-by: Andy Polyakov <[email protected]>
Reviewed-by: Rich Salz <[email protected]>
(Merged from #6245)
@dot-asm
Copy link
Contributor

dot-asm commented May 18, 2018

Merged. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approval: done This pull request has the required number of approvals

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants