]> git.ipfire.org Git - thirdparty/openssl.git/commit
QUIC LCID hash table collapse on Windows/32-bit due to SipHash digest size misuse
authorAlexandr Nedvedicky <sashan@openssl.org>
Wed, 28 Jan 2026 07:03:18 +0000 (08:03 +0100)
committerNeil Horman <nhorman@openssl.org>
Thu, 12 Mar 2026 18:06:04 +0000 (14:06 -0400)
commit0f37ab24383436a04bed21991f130094debe0878
tree25e2a0b2366c1d9ed02970dd99f4b890a090ff80
parent72e85ab704f75c8859e8853dfa55273e3dc44073
QUIC LCID hash table collapse on Windows/32-bit due to SipHash digest size misuse

Using sizeof(unsigned long) as SipHash digest size; SipHash supports
only 8 or 16 bytes. On platforms where sizeof(unsigned long) == 4,
the call fails, and lcid_hash returns the zero-initialized value,
degrading the hash table into list.

The issue was kindly reported and fix provided by Stanislav Fort at Aisle Research.

Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
MergeDate: Thu Mar 12 18:04:10 2026
(Merged from https://github.com/openssl/openssl/pull/29814)

(cherry picked from commit 6d621e6729d41a809d87c221728d11a52d913a13)
ssl/quic/quic_lcidm.c