Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Potential null pointer reference #19429

Conversation

yangyangtiantianlonglong
Copy link
Contributor

@yangyangtiantianlonglong yangyangtiantianlonglong commented Oct 18, 2022

BN_CTX_end()-->BN_STACK_pop() may cause a null pointer reference.
Fixes #19428

@github-actions github-actions bot added the severity: fips change The pull request changes FIPS provider sources label Oct 18, 2022
@t8m
Copy link
Member

t8m commented Oct 18, 2022

The proper fix is IMO to fix the bug in the testcase. I.e., put the BN_CTX_start right after the BN_CTX_new() call.

@t8m t8m added branch: master Merge to master branch triaged: bug The issue/pr is/fixes a bug branch: 3.0 Merge to openssl-3.0 branch labels Oct 18, 2022
@yangyangtiantianlonglong
Copy link
Contributor Author

The proper fix is IMO to fix the bug in the testcase. I.e., put the BN_CTX_start right after the BN_CTX_new() call.

Yes, I see the same approach for other test cases, but the unclear addition still has the same problem. And I'm going to do it as is customary.

@github-actions github-actions bot removed the severity: fips change The pull request changes FIPS provider sources label Oct 18, 2022
@t8m t8m added the branch: 3.1 Merge to openssl-3.1 label Oct 24, 2022
@paulidale paulidale added the approval: review pending This pull request needs review by a committer label Oct 27, 2022
@t8m
Copy link
Member

t8m commented Oct 27, 2022

Please do not add merge commits. Use git rebase against fresh master branch instead.

@yangyangtiantianlonglong
Copy link
Contributor Author

Please do not add merge commits. Use git rebase against fresh master branch instead.

Sorry, Git rebase has been redone.

@slontis slontis added approval: done This pull request has the required number of approvals and removed approval: review pending This pull request needs review by a committer labels Oct 27, 2022
@openssl-machine openssl-machine added approval: ready to merge The 24 hour grace period has passed, ready to merge and removed approval: done This pull request has the required number of approvals labels Oct 28, 2022
@openssl-machine
Copy link
Collaborator

This pull request is ready to merge

@t8m
Copy link
Member

t8m commented Nov 2, 2022

Merged to master, 3.0, and 3.1 branches. Thank you for your contribution.

@t8m t8m closed this Nov 2, 2022
openssl-machine pushed a commit that referenced this pull request Nov 2, 2022
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from #19429)

(cherry picked from commit 15c8df8)
openssl-machine pushed a commit that referenced this pull request Nov 2, 2022
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from #19429)

(cherry picked from commit 15c8df8)
openssl-machine pushed a commit that referenced this pull request Nov 2, 2022
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from #19429)
beldmit pushed a commit to beldmit/openssl that referenced this pull request Dec 26, 2022
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from openssl#19429)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approval: ready to merge The 24 hour grace period has passed, ready to merge branch: master Merge to master branch branch: 3.0 Merge to openssl-3.0 branch branch: 3.1 Merge to openssl-3.1 triaged: bug The issue/pr is/fixes a bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Potential null pointer reference
5 participants