]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
The EVP_PKEY_Q_keygen function now explicitly handles NULL curve name
authorIgor Ustinov <igus@openssl.foundation>
Tue, 14 Apr 2026 14:39:38 +0000 (16:39 +0200)
committerTomas Mraz <tomas@openssl.foundation>
Wed, 6 May 2026 16:45:40 +0000 (18:45 +0200)
It errors out with ERR_R_PASSED_NULL_PARAMETER in such case.

Reviewed-by: Matt Caswell <matt@openssl.foundation>
Reviewed-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Wed May  6 16:47:55 2026
(Merged from https://github.com/openssl/openssl/pull/30597)

crypto/evp/evp_lib.c

index 35719410b916e8bd297080c10698940dd71deb1e..dee8137ec4f4acc7fc600e892d9f8454db8f6a6f 100644 (file)
@@ -1029,6 +1029,10 @@ EVP_PKEY *EVP_PKEY_Q_keygen(OSSL_LIB_CTX *libctx, const char *propq,
         params[0] = OSSL_PARAM_construct_size_t(OSSL_PKEY_PARAM_RSA_BITS, &bits);
     } else if (OPENSSL_strcasecmp(type, "EC") == 0) {
         name = va_arg(args, char *);
+        if (name == NULL) {
+            ERR_raise(ERR_LIB_EVP, ERR_R_PASSED_NULL_PARAMETER);
+            return NULL;
+        }
         params[0] = OSSL_PARAM_construct_utf8_string(OSSL_PKEY_PARAM_GROUP_NAME,
             name, 0);
     }