]> git.ipfire.org Git - thirdparty/openssl.git/commit
Add NULL check before accessing PKCS7 encrypted algorithm
authorViliam Lejčík <lejcik@gmail.com>
Mon, 19 Feb 2024 20:39:05 +0000 (21:39 +0100)
committerTomas Mraz <tomas@openssl.org>
Mon, 25 Mar 2024 17:29:10 +0000 (18:29 +0100)
commit95dfb4244a8b6f23768714619f4f4640d51dc3ff
tree2c2d73b5d57b8fcfe2d9f852dd06c58ca60b0d74
parent99a1c93efa751f8c9ee06aafe877a2d8bdbdf990
Add NULL check before accessing PKCS7 encrypted algorithm

Printing content of an invalid test certificate causes application crash, because of NULL dereference:

user@user:~/openssl$ openssl pkcs12 -in test/recipes/80-test_pkcs12_data/bad2.p12 -passin pass: -info
MAC: sha256, Iteration 2048
MAC length: 32, salt length: 8
PKCS7 Encrypted data: Segmentation fault (core dumped)

Added test cases for pkcs12 bad certificates

Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23632)

(cherry picked from commit a4cbffcd8998180b98bb9f7ce6065ed37d079d8b)
apps/pkcs12.c
test/recipes/80-test_pkcs12.t