mirror of
https://github.com/openssl/openssl.git
synced 2024-11-21 01:15:20 +08:00
d23adad113
EVP_CIPHER_CTX_set_keylen() was succeeding even though a bad key length is passed to it. This is because the set_ctx_params() were all accepting this parameter and blindly changing the keylen even though the cipher did not accept a variable key length. Even removing this didn't entirely resolve the issue because set_ctx_params() functions succeed even if passed a parameter they do not recognise. This should fix various issues found by OSSfuzz/Cryptofuzz. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/10449) |
||
---|---|---|
.. | ||
common | ||
fips | ||
implementations | ||
build.info | ||
defltprov.c | ||
legacyprov.c |