diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2015-02-18 00:34:59 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2015-03-02 15:26:47 +0000 |
| commit | 51527f1e3564f210e984fe5b654c45d34e4f03d7 (patch) | |
| tree | 158ba7f2052d296d3a333aee2d275b439558c20e | |
| parent | 1810b0472838495129fdc4b652daba5dfb4ee90c (diff) | |
| download | openssl-new-51527f1e3564f210e984fe5b654c45d34e4f03d7.tar.gz | |
Check public key is not NULL.
CVE-2015-0288
PR#3708
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 28a00bcd8e318da18031b2ac8778c64147cd54f9)
| -rw-r--r-- | crypto/x509/x509_req.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/crypto/x509/x509_req.c b/crypto/x509/x509_req.c index bc6e566c95..01795f4b3f 100644 --- a/crypto/x509/x509_req.c +++ b/crypto/x509/x509_req.c @@ -92,6 +92,8 @@ X509_REQ *X509_to_X509_REQ(X509 *x, EVP_PKEY *pkey, const EVP_MD *md) goto err; pktmp = X509_get_pubkey(x); + if (pktmp == NULL) + goto err; i = X509_REQ_set_pubkey(ret, pktmp); EVP_PKEY_free(pktmp); if (!i) |