Skip to content

Commit 61400c4

Browse files
committed
Patch issue in the openssl that might cause false positive
running sanitizer.
1 parent 2f5251f commit 61400c4

File tree

1 file changed

+20
-0
lines changed

1 file changed

+20
-0
lines changed

scripts/fuzz/libssl-dev.patch

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -99,3 +99,23 @@ Last-Update: 2024-08-16
9999
int i, ret = 0;
100100
enum {
101101
i_1 = 0, i_10, i_11, i_101, i_111, i_1010, i_1111,
102+
--- openssl-1.1.1f.orig/ssl/ssl_lib.c 2025/03/22 18:19:03 1.1
103+
+++ openssl-1.1.1f/ssl/ssl_lib.c 2025/03/22 18:19:09
104+
@@ -929,7 +929,7 @@
105+
* any new session built out of this id/id_len and the ssl_version in use
106+
* by this SSL.
107+
*/
108+
- SSL_SESSION r, *p;
109+
+ SSL_SESSION r = {0}, *p;
110+
111+
if (id_len > sizeof(r.session_id))
112+
return 0;
113+
@@ -5415,7 +5415,7 @@
114+
STACK_OF(SSL_CIPHER) *scsvs = NULL;
115+
int n;
116+
/* 3 = SSLV2_CIPHER_LEN > TLS_CIPHER_LEN = 2. */
117+
- unsigned char cipher[SSLV2_CIPHER_LEN];
118+
+ unsigned char cipher[SSLV2_CIPHER_LEN] = {0};
119+
120+
n = sslv2format ? SSLV2_CIPHER_LEN : TLS_CIPHER_LEN;
121+

0 commit comments

Comments
 (0)