[openssl/openssl] 3f7640: Fix CMS Ed448 signer NULL digest handling

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 3f7640a6c015496b6c02ba7d5e5ff89df0bae603
      https://github.com/openssl/openssl/commit/3f7640a6c015496b6c02ba7d5e5ff89df0bae603
  Author: Mounir IDRASSI <[email protected]>
  Date:   2026-07-29 (Wed, 29 Jul 2026)

  Changed paths:
    M crypto/asn1/x_algor.c
    M crypto/cms/cms_sd.c
    M test/cmsapitest.c
    M test/recipes/80-test_cmsapi.t
    M test/x509_internal_test.c

  Log Message:
  -----------
  Fix CMS Ed448 signer NULL digest handling

Reject ossl_cms_adjust_md() failures unconditionally in
CMS_add1_signer(), so unsupported Ed448 signing with signed attributes
fails cleanly instead of passing a NULL digest to X509_ALGOR_set_md().

Add a defensive NULL digest check to X509_ALGOR_set_md(), and cover
the CMS Ed448 signed-attributes/no-attributes cases plus the low-level
NULL digest path in regression tests.

Reviewed-by: Andrew Dinh <[email protected]>
Reviewed-by: Jakub Zelenka <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
MergeDate: Wed Jul 29 16:49:57 2026
(Merged from https://github.com/openssl/openssl/pull/31409)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/178f83-3f7640%40github.com.