diff options
| author | tb <> | 2020-06-05 18:44:42 +0000 |
|---|---|---|
| committer | tb <> | 2020-06-05 18:44:42 +0000 |
| commit | a6cda271c8a6d54db86ab3cb8d7586a529351181 (patch) | |
| tree | 61efb953452a8c0ac39e8e78cdaefd14329c433c /src/lib/libssl | |
| parent | 8557b3cad65cc11d6a0163daf38dbcb957d6c367 (diff) | |
| download | openbsd-a6cda271c8a6d54db86ab3cb8d7586a529351181.tar.gz openbsd-a6cda271c8a6d54db86ab3cb8d7586a529351181.tar.bz2 openbsd-a6cda271c8a6d54db86ab3cb8d7586a529351181.zip | |
Add a custom copy handler for AES key wrap
This is necessary because ctx->cipher_data is an EVP_AES_WRAP_CTX
containing a pointer to ctx->iv. EVP_CIPHER_CTX_copy() uses memcpy
to copy cipher_data to the target struct. The result is that the
copy contains a pointer to the wrong struct, which then leads to a
use-after-free. The custom copy handler fixes things up to avoid
that.
Issue reported by Guido Vranken
ok beck inoguchi jsing
Diffstat (limited to 'src/lib/libssl')
0 files changed, 0 insertions, 0 deletions