[openssl/openssl] 31f7e4: Fix NULL dereference in v2i_AUTHORITY_KEYID()
"'Adam Tabak' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/openssl-3.4/[email protected]> |
Branch: refs/heads/openssl-3.4
Home: https://github.com/openssl/openssl
Commit: 31f7e4eb7a907fb4e6b8ec577400801b93d46e7b
https://github.com/openssl/openssl/commit/31f7e4eb7a907fb4e6b8ec577400801b93d46e7b
Author: Greensi7 <[email protected]>
Date: 2026-08-07 (Fri, 07 Aug 2026)
Changed paths:
M crypto/x509/v3_akid.c
Log Message:
-----------
Fix NULL dereference in v2i_AUTHORITY_KEYID()
X509V3_EXT_d2i() may return NULL on malformed input
or on allocation failure. v2i_AUTHORITY_KEYID() passed
that NULL to ASN1_STRING_length_ex() causing NULL dereference.
Found by x509v3 fuzzer. Example fuzzer input:
```
[default]
subjectKeyIdentifier = DER:05:00
authorityKeyIdentifier = keyid
```
Reviewed-by: Milan Broz <[email protected]>
Reviewed-by: Viktor Dukhovni <[email protected]>
MergeDate: Fri Aug 7 14:03:37 2026
(Merged from https://github.com/openssl/openssl/pull/32177)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.4/ee72a8-31f7e4%40github.com.