From: Viktor Dukhovni <openssl-users@dukhovni.org>
Date: Wed, 29 Sep 2021 22:03:13 +0000 (-0400)
Subject: Fully initialise cipher/digest app handles
X-Git-Tag: openssl-3.2.0-alpha1~3503
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a8cc0efe0d8fdd7bfa1d40b3c008d7d6ddf970db;p=thirdparty%2Fopenssl.git

Fully initialise cipher/digest app handles

This avoids a crash in e.g. `openssl chacha20` as reported by
Steffen Nurpmeso on openssl-users.

Resolves: #16713

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16714)
---

diff --git a/apps/openssl.c b/apps/openssl.c
index 30e1e755e01..2693350ffc9 100644
--- a/apps/openssl.c
+++ b/apps/openssl.c
@@ -395,6 +395,7 @@ static int do_cmd(LHASH_OF(FUNCTION) *prog, int argc, char *argv[])
 
     if (argc <= 0 || argv[0] == NULL)
         return 0;
+    memset(&f, 0, sizeof(f));
     f.name = argv[0];
     fp = lh_FUNCTION_retrieve(prog, &f);
     if (fp == NULL) {