Edit

IABSD.fr/src/lib/libcrypto/evp

Branch :

  • Show log

    Commit

  • Author : tb
    Date : 2020-06-05 18:44:42
    Hash : f72711c6
    Message : Add a custom copy handler for AES key wrap This is necessary because ctx->cipher_data is an EVP_AES_WRAP_CTX containing a pointer to ctx->iv. EVP_CIPHER_CTX_copy() uses memcpy to copy cipher_data to the target struct. The result is that the copy contains a pointer to the wrong struct, which then leads to a use-after-free. The custom copy handler fixes things up to avoid that. Issue reported by Guido Vranken ok beck inoguchi jsing