Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

siphash: Fail finalization on uninitialized siphash context #18142

Closed
wants to merge 4 commits into from

Conversation

t8m
Copy link
Member

@t8m t8m commented Apr 21, 2022

Also properly update sipcopy when setting the size and fully duplicate the context on dup.

Fixes #18140

Checklist
  • tests are added or updated

@t8m t8m added branch: master Merge to master branch triaged: bug The issue/pr is/fixes a bug branch: 3.0 Merge to openssl-3.0 branch labels Apr 21, 2022
@t8m t8m added approval: review pending This pull request needs review by a committer approval: otc review pending This pull request needs review by an OTC member labels Apr 21, 2022
@t8m t8m added the severity: regression The issue/pr is a regression from previous released version label Apr 25, 2022
@t8m
Copy link
Member Author

t8m commented Apr 25, 2022

ping for reviews

@paulidale paulidale removed the approval: otc review pending This pull request needs review by an OTC member label Apr 25, 2022
@mattcaswell mattcaswell added approval: done This pull request has the required number of approvals and removed approval: review pending This pull request needs review by a committer labels Apr 26, 2022
@openssl-machine openssl-machine removed the approval: done This pull request has the required number of approvals label Apr 27, 2022
@openssl-machine
Copy link
Collaborator

This pull request is ready to merge

@openssl-machine openssl-machine added the approval: ready to merge The 24 hour grace period has passed, ready to merge label Apr 27, 2022
openssl-machine pushed a commit that referenced this pull request Apr 27, 2022
Fixes #18140

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from #18142)

(cherry picked from commit 650b142)
openssl-machine pushed a commit that referenced this pull request Apr 27, 2022
Also fully duplicate the context on dup

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from #18142)

(cherry picked from commit 905fec4)
openssl-machine pushed a commit that referenced this pull request Apr 27, 2022
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from #18142)

(cherry picked from commit 4b694f2)
openssl-machine pushed a commit that referenced this pull request Apr 27, 2022
Fixes #18140

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from #18142)
openssl-machine pushed a commit that referenced this pull request Apr 27, 2022
Also fully duplicate the context on dup

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from #18142)
openssl-machine pushed a commit that referenced this pull request Apr 27, 2022
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from #18142)
@t8m
Copy link
Member Author

t8m commented Apr 27, 2022

Merged to master and 3.0 branches. Thank you for your reviews.

@t8m t8m closed this Apr 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approval: ready to merge The 24 hour grace period has passed, ready to merge branch: master Merge to master branch branch: 3.0 Merge to openssl-3.0 branch severity: regression The issue/pr is a regression from previous released version triaged: bug The issue/pr is/fixes a bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

OSS-Fuzz #46886: Out-of-bounds write in SipHash_Final
5 participants