[openssl/openssl] 9531b6: include/internal/hashtable.h: avoid OOB read in os...
"'esyr' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/openssl-3.6/[email protected]> |
Branch: refs/heads/openssl-3.6
Home: https://github.com/openssl/openssl
Commit: 9531b6f1c338e7e4a5197a9029b357da0e4c182a
https://github.com/openssl/openssl/commit/9531b6f1c338e7e4a5197a9029b357da0e4c182a
Author: Eugene Syromiatnikov <[email protected]>
Date: 2026-06-24 (Wed, 24 Jun 2026)
Changed paths:
M include/internal/hashtable.h
Log Message:
-----------
include/internal/hashtable.h: avoid OOB read in ossl_ht_strcase()
Avoid accessing src[len] by swapping the check order and bound check
the iterator variable before the access.
Found by cppcheck.
Fixes: cc4ea5e00028 "Introduce new internal hashtable implementation"
Signed-off-by: Eugene Syromiatnikov <[email protected]>
Reviewed-by: Nikola Pajkovsky <[email protected]>
Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Paul Dale <[email protected]>
MergeDate: Wed Jun 24 13:09:25 2026
(Merged from https://github.com/openssl/openssl/pull/31663)
(cherry picked from commit 029d629db23e95c6e827d09dae89ee8b4b54f3e2)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.6/eebb53-9531b6%40github.com.