Check public key is not NULL.

CVE-2015-0288 PR#3708 Reviewed-by: N Matt Caswell <matt@openssl.org>

Check public key is not NULL.
CVE-2015-0288 PR#3708 Reviewed-by: N Matt Caswell <matt@openssl.org>
28a00bcd · Dr. Stephen Henson · 437b14b5 · 28a00bcd
隐藏空白更改
内联并排

Showing with 2 addition and 0 deletion

crypto/x509/x509_req.c crypto/x509/x509_req.c +2 -0

未找到文件。
--- a/crypto/x509/x509_req.c
+++ b/crypto/x509/x509_req.c
@@ -92,6 +92,8 @@ X509_REQ *X509_to_X509_REQ(X509 *x, EVP_PKEY *pkey, const EVP_MD *md)
        goto err;

    pktmp = X509_get_pubkey(x);
+    if (pktmp == NULL)
+        goto err;
    i = X509_REQ_set_pubkey(ret, pktmp);
    EVP_PKEY_free(pktmp);
    if (!i)