]> git.ipfire.org Git - thirdparty/openssl.git/commit
Don't overflow the output length in EVP_CipherUpdate calls
authorMatt Caswell <matt@openssl.org>
Tue, 2 Feb 2021 17:17:23 +0000 (17:17 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 16 Feb 2021 11:42:35 +0000 (11:42 +0000)
commit6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1
tree2b8bd698a2abd611cdcaac10f6599a4cc6042662
parent481a88f13c44996a008195791ea0dc076b968774
Don't overflow the output length in EVP_CipherUpdate calls

CVE-2021-23840

Reviewed-by: Paul Dale <pauli@openssl.org>
crypto/err/openssl.txt
crypto/evp/evp_enc.c
crypto/evp/evp_err.c
include/openssl/evperr.h