{"schema":"libjg2-1", "vpath":"/git/", "avatar":"/git/avatar/", "alang":"", "gen_ut":1750650202, "reponame":"openssl", "desc":"OpenSSL", "owner": { "name": "Andy Green", "email": "andy@warmcat.com", "md5": "c50933ca2aa61e0fe2c43d46bb6b59cb" },"url":"https://warmcat.com/repo/openssl", "f":3, "items": [ {"schema":"libjg2-1", "cid":"ba77587a15146891b6d7fd2f176c7ec2", "commit": {"type":"commit", "time": 1540750872, "time_ofs": 60, "oid_tree": { "oid": "07ad33ef90dd928b4734ed40b505ca817b924324", "alias": []}, "oid":{ "oid": "d2953e5e7d8be6e83b35683f41bc0ae971782d16", "alias": []}, "msg": "drbg_lib: avoid NULL pointer dereference in drbg_add", "sig_commit": { "git_time": { "time": 1540750872, "offset": 60 }, "name": "Dr. Matthias St. Pierre", "email": "Matthias.St.Pierre@ncp-e.com", "md5": "7d700d548b38974b2492f8ff219793b3" }, "sig_author": { "git_time": { "time": 1540730795, "offset": 60 }, "name": "Dr. Matthias St. Pierre", "email": "Matthias.St.Pierre@ncp-e.com", "md5": "7d700d548b38974b2492f8ff219793b3" }}, "body": "drbg_lib: avoid NULL pointer dereference in drbg_add\n\nFound by Coverity Scan\n\nReviewed-by: Bernd Edlinger \u003cbernd.edlinger@hotmail.de\u003e\nReviewed-by: Richard Levitte \u003clevitte@openssl.org\u003e\n(Merged from https://github.com/openssl/openssl/pull/7511)\n\n(cherry picked from commit 59f90557dd6e35cf72ac72016609d759ac78fcb9)\n" , "diff": "diff --git a/crypto/rand/drbg_lib.c b/crypto/rand/drbg_lib.c\nindex f396f83..e7f383a 100644\n--- a/crypto/rand/drbg_lib.c\n+++ b/crypto/rand/drbg_lib.c\n@@ -1010,7 +1010,7 @@ static int drbg_add(const void *buf, int num, double randomness)\n int ret \u003d 0;\n RAND_DRBG *drbg \u003d RAND_DRBG_get0_master();\n size_t buflen;\n- size_t seedlen \u003d rand_drbg_seedlen(drbg);\n+ size_t seedlen;\n \n if (drbg \u003d\u003d NULL)\n return 0;\n@@ -1018,6 +1018,8 @@ static int drbg_add(const void *buf, int num, double randomness)\n if (num \u003c 0 || randomness \u003c 0.0)\n return 0;\n \n+ seedlen \u003d rand_drbg_seedlen(drbg);\n+\n buflen \u003d (size_t)num;\n \n if (buflen \u003c seedlen || randomness \u003c (double) seedlen) {\n","s":{"c":1750638513,"u": 40429}} ],"g": 1248,"chitpc": 0,"ehitpc": 0,"indexed":0 , "ab": 0, "si": 0, "db":0, "di":0, "sat":0, "lfc": "7d0a"}