[openssl/openssl] 68c032: Provide ASN1_STRING_new_not_owned()

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 68c0321e90d015ebe851b33761c0acdbaebc12bd
      https://github.com/openssl/openssl/commit/68c0321e90d015ebe851b33761c0acdbaebc12bd
  Author: Bob Beck <[email protected]>
  Date:   2026-06-03 (Wed, 03 Jun 2026)

  Changed paths:
    M CHANGES.md
    M crypto/asn1/a_bitstr.c
    M crypto/asn1/asn1_lib.c
    M crypto/asn1/asn1_local.h
    M crypto/asn1/tasn_fre.c
    M doc/man3/ASN1_STRING_new.pod
    M include/crypto/asn1.h
    M include/openssl/asn1.h.in
    M test/asn1_string_test.c
    M util/libcrypto.num

  Log Message:
  -----------
  Provide ASN1_STRING_new_not_owned()

This function provides the ability to construct an ASN1_STRING
containing data that is not owned by the constructed ASN1_STRING. The
resulting ASN1_STRING, when freed, will not free the data, and it is
the caller's resposibility to ensure that the data lives past the
lifetime of any returned ASN1_STRING.

Why? you may ask? Many places where ->data and ->length were used
directly in the past before the opaquification of ASN1_STRING were
for this purpose, whether used for actual static data, or to turn
bytes created by and in control of the caller into an ASN1_STRING
for temporary use as an input. This function makes this easier
to do without making copies.

The function deliberately does not allow the creation of a BIT_STRING
as this would require also always providing unused bits, which is
annoying and unnecessary for almost all potential use cases.

For: https://github.com/openssl/openssl/issues/29861
For: https://github.com/openssl/openssl/issues/30162

Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Saša Nedvědický <[email protected]>
MergeDate: Wed Jun  3 11:42:49 2026
(Merged from https://github.com/openssl/openssl/pull/30964)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/46b516-68c032%40github.com.