Project

General

Profile

« Previous | Next » 

Revision a1d9afc2

Added by rhe almost 8 years ago

openssl: avoid NULL dereference in {DH,DSA,RSA}_size()

  • ext/openssl/ossl_pkey_dh.c (ossl_dh_compute_key): Check that the DH
    has 'p' (the prime) before calling DH_size(). We can create a DH with
    no parameter but DH_size() does not check and dereferences NULL.
    [ruby-core:75720] [Bug #12428]

  • ext/openssl/ossl_pkey_dsa.c (ossl_dsa_sign): Ditto. DSA_size() does
    not check dsa->q.

  • ext/openssl/ossl_pkey_rsa.c (ossl_rsa_public_encrypt,
    ossl_rsa_public_decrypt, ossl_rsa_private_encrypt,
    ossl_rsa_private_decrypt): Ditto. RSA_size() does not check rsa->n.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@55175 b2dd03c8-39d4-4d8f-98ff-823fe69b080e