[openssl/openssl] 243cc6: CMS: Guard against int overflow in cms_kek_cipher()

"'Daniel Kubec' via openssl-commits" <[email protected]> Wed, 29 Jul 2026 09:57:36 -0700
Newsgroups gmane.comp.encryption.openssl.cvs
Message-ID <openssl/openssl/push/refs/heads/openssl-3.6/[email protected]>
  Branch: refs/heads/openssl-3.6
  Home:   https://github.com/openssl/openssl
  Commit: 243cc628d0c2425aca735026afe9c5adcbac2550
      https://github.com/openssl/openssl/commit/243cc628d0c2425aca735026afe9c5adcbac2550
  Author: Daniel Kubec <[email protected]>
  Date:   2026-07-29 (Wed, 29 Jul 2026)

  Changed paths:
    M crypto/cms/cms_kemri.c

  Log Message:
  -----------
  CMS: Guard against int overflow in cms_kek_cipher()

Mirror the check from cms_kari.c in cms_kemri.c.

Reviewed-by: Jakub Zelenka <[email protected]>
Reviewed-by: Paul Dale <[email protected]>
MergeDate: Wed Jul 29 16:56:18 2026
(Merged from https://github.com/openssl/openssl/pull/32072)

(cherry picked from commit 14149949d5c13c12c92a17f1a9eb943a003d0f43)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.6/1c54a3-243cc6%40github.com.