]> git.ipfire.org Git - thirdparty/openssl.git/commit
Don't overflow the output length in EVP_CipherUpdate calls
authorMatt Caswell <matt@openssl.org>
Tue, 2 Feb 2021 17:17:23 +0000 (17:17 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 16 Feb 2021 11:40:12 +0000 (11:40 +0000)
commitc9fb704cf3af5524eb8e79961e31b60eee8c3c47
treeb657b2b1a0add855541ba920b8ea861018b3eb7e
parentc1ddd392cf9737c09c1f9bf690adfbe596403c5e
Don't overflow the output length in EVP_CipherUpdate calls

CVE-2021-23840

Reviewed-by: Paul Dale <pauli@openssl.org>
crypto/err/openssl.txt
crypto/evp/evp_enc.c
crypto/evp/evp_err.c
include/crypto/evperr.h
include/openssl/evperr.h