Zero-fill IV by default.
Fixes uninitialized memory read reported by Nick Mathewson Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/6603)
This commit is contained in:
parent
358ffa05cd
commit
10c3c1c1ec
1 changed files with 1 additions and 0 deletions
|
@ -488,6 +488,7 @@ int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher)
|
|||
char *dekinfostart, c;
|
||||
|
||||
cipher->cipher = NULL;
|
||||
memset(cipher->iv, 0, sizeof(cipher->iv));
|
||||
if ((header == NULL) || (*header == '\0') || (*header == '\n'))
|
||||
return 1;
|
||||
|
||||
|
|
Loading…
Reference in a new issue