Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

params_dup: fix off by one error that allows array overreach. #14922

Closed
wants to merge 1 commit into from

Conversation

paulidale
Copy link
Contributor

The end of loop test allows the index to go one step too far to be able to
terminate the param array but the end of list record is still added.

@paulidale paulidale added branch: master Merge to master branch approval: review pending This pull request needs review by a committer labels Apr 18, 2021
@paulidale paulidale added this to the 3.0.0 milestone Apr 18, 2021
@paulidale paulidale self-assigned this Apr 18, 2021
@paulidale paulidale changed the title params_dup: fix oiff by one error that allows array overreach. params_dup: fix off by one error that allows array overreach. Apr 18, 2021
The end of loop test allows the index to go one step too far to be able to
terminate the param array but the end of list record is still added.
@levitte levitte added approval: done This pull request has the required number of approvals and removed approval: review pending This pull request needs review by a committer labels Apr 19, 2021
@openssl-machine openssl-machine removed the approval: done This pull request has the required number of approvals label Apr 20, 2021
@openssl-machine
Copy link
Collaborator

This pull request is ready to merge

@openssl-machine openssl-machine added the approval: ready to merge The 24 hour grace period has passed, ready to merge label Apr 20, 2021
@paulidale
Copy link
Contributor Author

Merged to master.

@paulidale paulidale closed this Apr 20, 2021
@paulidale paulidale deleted the off-by-one branch April 20, 2021 22:58
openssl-machine pushed a commit that referenced this pull request Apr 20, 2021
The end of loop test allows the index to go one step too far to be able to
terminate the param array but the end of list record is still added.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from #14922)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approval: ready to merge The 24 hour grace period has passed, ready to merge branch: master Merge to master branch
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants