]> git.ipfire.org Git - thirdparty/openssl.git/commit
crypto/mem.c: check for overflow in size calculation in CRYPTO_aligned_alloc
authorEugene Syromiatnikov <esyr@openssl.org>
Thu, 31 Jul 2025 12:32:27 +0000 (14:32 +0200)
committerNeil Horman <nhorman@openssl.org>
Fri, 8 Aug 2025 16:22:10 +0000 (12:22 -0400)
commit89f1f9bd73351e5f4fe16bcd8062d71e8f1fe5a7
treed25164d56bdc555c6bbb8b7cd2f0895988afc3da
parentff3caae4d288c27b4268a3e55fb94a5abeff5881
crypto/mem.c: check for overflow in size calculation in CRYPTO_aligned_alloc

The open-coded implementation performs addition of size and alignment,
that may overflow.

Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28059)
crypto/mem.c
include/internal/mem_alloc_utils.h