[openssl/openssl] b9a8b0: Fix heap buffer overflow in CRYPTO_128_unwrap_pad ...
"'Denis Mingulov' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/master/[email protected]> |
Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: b9a8b0e82805a951e8ecba64d8eb6bf7f82d708a
https://github.com/openssl/openssl/commit/b9a8b0e82805a951e8ecba64d8eb6bf7f82d708a
Author: Denis Mingulov <[email protected]>
Date: 2026-08-19 (Wed, 19 Aug 2026)
Changed paths:
M crypto/modes/wrap128.c
M test/aeswrap_test.c
Log Message:
-----------
Fix heap buffer overflow in CRYPTO_128_unwrap_pad error paths
OPENSSL_cleanse on error paths used inlen (ciphertext length) instead
of padded_len (output buffer size = inlen - 8), writing 8 bytes past
the caller-provided output buffer.
Add regression tests using guard bytes to detect the overflow in any
build configuration, including when ASan cannot instrument the
assembly OPENSSL_cleanse implementation.
Reviewed-by: Mounir Idrassi <[email protected]>
Reviewed-by: Paul Dale <[email protected]>
Reviewed-by: Andrew Dinh <[email protected]>
MergeDate: Wed Aug 19 03:20:07 2026
(Merged from https://github.com/openssl/openssl/pull/30663)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/3e7bd7-b9a8b0%40github.com.