From: Matt Caswell <matt@openssl.org>
Date: Wed, 10 Feb 2021 16:36:57 +0000 (+0000)
Subject: Test that X509_issuer_and_serial_hash doesn't crash
X-Git-Tag: openssl-3.0.0-alpha12~32
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=55869f594f052561b11a2db6a7c42690051868de;p=thirdparty%2Fopenssl.git

Test that X509_issuer_and_serial_hash doesn't crash

Provide a certificate with a bad issuer and check that
X509_issuer_and_serial_hash doesn't crash.

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
---

diff --git a/fuzz/corpora/x509/f5ded9e25448f6f47349d012eda2eb4fccbc7c76 b/fuzz/corpora/x509/f5ded9e25448f6f47349d012eda2eb4fccbc7c76
new file mode 100644
index 00000000000..439c50b0134
Binary files /dev/null and b/fuzz/corpora/x509/f5ded9e25448f6f47349d012eda2eb4fccbc7c76 differ
diff --git a/fuzz/x509.c b/fuzz/x509.c
index 858ad61bbfa..bf2dfb826d3 100644
--- a/fuzz/x509.c
+++ b/fuzz/x509.c
@@ -37,6 +37,8 @@ int FuzzerTestOneInput(const uint8_t *buf, size_t len)
         X509_print(bio, x509);
         BIO_free(bio);
 
+        X509_issuer_and_serial_hash(x509);
+
         i2d_X509(x509, &der);
         OPENSSL_free(der);