diff options
| author | tb <> | 2022-10-20 15:18:54 +0000 |
|---|---|---|
| committer | tb <> | 2022-10-20 15:18:54 +0000 |
| commit | 06d46a56a0e6f5c4b81f1aee0f3f5d2b1d7dd107 (patch) | |
| tree | a21f86416f0f025c43281497d27f32c9b182114b /src/lib/libssl/ssl_locl.h | |
| parent | 4ec7d3d391f9e006f388e4e281fb789c8fc3ff62 (diff) | |
| download | openbsd-06d46a56a0e6f5c4b81f1aee0f3f5d2b1d7dd107.tar.gz openbsd-06d46a56a0e6f5c4b81f1aee0f3f5d2b1d7dd107.tar.bz2 openbsd-06d46a56a0e6f5c4b81f1aee0f3f5d2b1d7dd107.zip | |
Annotate misuse of EVP_Digest()
The session_id member of SSL_SESSION has 32 bytes for historical
reasons. This precisely accommodates a SHA-256 and is currently
computed using this hash. If the hash function is ever changed,
this will likely overflow. This should be fixed in code. Leave
it at an XXX comment for now.
Pointed out by jsing
Diffstat (limited to 'src/lib/libssl/ssl_locl.h')
0 files changed, 0 insertions, 0 deletions