提交 9d7ec809 编写于 作者: M Matt Caswell

Don't use an uninitialised variable in srp application

The srp application created an uninitialised DB_ATTR object and then
passed it to the load_index function which attempted to read it. A
DB_ATTR object only contains a single field called "unique_subject".
AFAICT this attribute is unused in the SRP case, and therefore it would be
better to pass a NULL DB_ATTR to load_index (which handles that case
gracefully).
Reviewed-by: NRich Salz <rsalz@openssl.org>
上级 40a8643a
...@@ -256,7 +256,6 @@ OPTIONS srp_options[] = { ...@@ -256,7 +256,6 @@ OPTIONS srp_options[] = {
int srp_main(int argc, char **argv) int srp_main(int argc, char **argv)
{ {
CA_DB *db = NULL; CA_DB *db = NULL;
DB_ATTR db_attr;
CONF *conf = NULL; CONF *conf = NULL;
int gNindex = -1, maxgN = -1, ret = 1, errors = 0, verbose = 0, i; int gNindex = -1, maxgN = -1, ret = 1, errors = 0, verbose = 0, i;
int doupdatedb = 0, mode = OPT_ERR; int doupdatedb = 0, mode = OPT_ERR;
...@@ -401,7 +400,7 @@ int srp_main(int argc, char **argv) ...@@ -401,7 +400,7 @@ int srp_main(int argc, char **argv)
BIO_printf(bio_err, "Trying to read SRP verifier file \"%s\"\n", BIO_printf(bio_err, "Trying to read SRP verifier file \"%s\"\n",
srpvfile); srpvfile);
db = load_index(srpvfile, &db_attr); db = load_index(srpvfile, NULL);
if (db == NULL) if (db == NULL)
goto end; goto end;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册