jing-wang177apps/enc.c: avoid signed integer overflow on bufsize assignment

be30c18f创建于 2025年9月16日历史提交

文件	最后提交记录	最后更新时间
HOWTO	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
images	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
internal	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
life-cycles	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
man1	apps/enc.c: avoid signed integer overflow on bufsize assignment The calculated option value, while being long-typed, is not checked for fitting into int-sized bufsize. Avoid overflow by throwing error if it is bigger than INT_MAX and document that behaviour. Fixes: 7e1b7485706c "Big apps cleanup (option-parsing, etc)" Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665149 References: https://github.com/openssl/project/issues/1362 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28408) (cherry picked from commit 98cb959999e4db9be524a972dccaf6b0c8167431) Signed-off-by: jing-wang177 <wangjing561@huawei.com>	10 个月前
man3	crypto/rand/randfile.c: avoid signed integer overflow in RAND_load_file If a file supplied to RAND_load_file is too big (more than INT_MAX bytes), it is possible to trigger a signer integer overflow during ret calculation. Avoid it by returning early when we are about to hit it on the next iteration. Reported-by: Liu-Ermeng <liuermeng2@huawei.com> Resolves: https://github.com/openssl/openssl/issues/28375 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28379) (cherry picked from commit 35db6a15d436aa4d981ebcd581eded55fc8c8fb6) Signed-off-by: jing-wang177 <wangjing561@huawei.com>	10 个月前
man5	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
man7	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
README.md	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
build.info	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
build.info.in	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
dir-locals.example.el	huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com>	4 年前
fingerprints.txt	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
openssl-c-indent.el	huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com>	4 年前
perlvars.pm	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前

OpenSSL Documentation

README.md This file

fingerprints.txt PGP fingerprints of authorised release signers

standards.txt standards.txt Moved to the web, https://www.openssl.org/docs/standards.html

HOWTO/ A few how-to documents; not necessarily up-to-date

man1/ The openssl command-line tools; start with openssl.pod

man3/ The SSL library and the crypto library

man5/ File formats

man7/ Overviews; start with crypto.pod and ssl.pod, for example Algorithm specific EVP_PKEY documentation.

Formatted versions of the manpages (apps,ssl,crypto) can be found at https://www.openssl.org/docs/manpages.html