]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
X509v3_addr_canonize(): Check whether addr == NULL
authorBartel Artem <artem.bartel@gmail.com>
Wed, 29 Jan 2025 07:21:35 +0000 (10:21 +0300)
committerTomas Mraz <tomas@openssl.org>
Mon, 3 Mar 2025 08:43:22 +0000 (09:43 +0100)
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26583)

crypto/x509/v3_addr.c

index d0e5f9efe601612e0f38c5945d24ac9e978fe20d..519096714ca2c17b958ae96fb2100242246bf29a 100644 (file)
@@ -912,6 +912,11 @@ int X509v3_addr_canonize(IPAddrBlocks *addr)
 {
     int i;
 
+    if (addr == NULL) {
+        ERR_raise(ERR_LIB_X509V3, X509V3_R_INVALID_NULL_ARGUMENT);
+        return 0;
+    }
+
     for (i = 0; i < sk_IPAddressFamily_num(addr); i++) {
         IPAddressFamily *f = sk_IPAddressFamily_value(addr, i);