forked from pool/openssl
6a3418284a
- Add upstream patches fixing coverity scan issues: * 0018-fix-coverity-issues-966593-966596.patch * 0020-Initialize-num-properly.patch * 0022-bignum-allow-concurrent-BN_MONT_CTX_set_locked.patch * 0023-evp-prevent-underflow-in-base64-decoding.patch * 0024-Fixed-NULL-pointer-dereference-in-PKCS7_dataDecode-r.patch * 0025-fix-coverity-issue-966597-error-line-is-not-always-i.patch - Update 0001-libcrypto-Hide-library-private-symbols.patch to cover more private symbols, now 98% complete and probably not much more can be done to fix the rest of the ill-defined API. - openssl-fips-hidden.patch new, hides private symbols added by the FIPS patches. - openssl-no-egd.patch disable the EGD (entropy gathering daemon) interface, we have no EGD in the distro and obtaining entropy from a place other than /dev/*random, the hardware rng or the openSSL internal PRNG is an extremely bad & dangerous idea. - use secure_getenv instead of getenv everywhere. (forwarded request 233217 from elvigia) OBS-URL: https://build.opensuse.org/request/show/233553 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl?expand=0&rev=117
27 lines
679 B
Diff
27 lines
679 B
Diff
From 7b7b18c57e899201338d91083bc49cc8c5a915fc Mon Sep 17 00:00:00 2001
|
|
From: Tim Hudson <tjh@cryptsoft.com>
|
|
Date: Mon, 5 May 2014 06:41:22 +1000
|
|
Subject: [PATCH 18/23] - fix coverity issues 966593-966596
|
|
|
|
---
|
|
crypto/srp/srp_vfy.c | 3 +++
|
|
1 file changed, 3 insertions(+)
|
|
|
|
diff --git a/crypto/srp/srp_vfy.c b/crypto/srp/srp_vfy.c
|
|
index 4a3d13e..fdca19f 100644
|
|
--- a/crypto/srp/srp_vfy.c
|
|
+++ b/crypto/srp/srp_vfy.c
|
|
@@ -93,6 +93,9 @@ static int t_fromb64(unsigned char *a, const char *src)
|
|
else a[i] = loc - b64table;
|
|
++i;
|
|
}
|
|
+ /* if nothing valid to process we have a zero length response */
|
|
+ if (i == 0)
|
|
+ return 0;
|
|
size = i;
|
|
i = size - 1;
|
|
j = size;
|
|
--
|
|
1.8.4.5
|
|
|