From 1cb35ce06a968dc82e7cd9502ecce8e89eca9580 Mon Sep 17 00:00:00 2001 From: Jiasheng Jiang Date: Fri, 24 Jun 2022 15:35:05 +0800 Subject: fuzz/asn1.c: Add check for ASN1_item_i2d As the potential failure of the ASN1_item_i2d, it should be better to check the return value. Signed-off-by: Jiasheng Jiang Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/18647) --- fuzz/asn1.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'fuzz') diff --git a/fuzz/asn1.c b/fuzz/asn1.c index 69978cd054..ee602a08a3 100644 --- a/fuzz/asn1.c +++ b/fuzz/asn1.c @@ -317,8 +317,9 @@ int FuzzerTestOneInput(const uint8_t *buf, size_t len) ASN1_item_print(bio, o, 4, i, pctx); BIO_free(bio); } - ASN1_item_i2d(o, &der, i); - OPENSSL_free(der); + if (ASN1_item_i2d(o, &der, i) > 0) { + OPENSSL_free(der); + } ASN1_item_free(o, i); } } -- cgit v1.2.1