[openssl] dh->q might be NULL.

Tomáš Mráz tmraz at fedoraproject.org
Tue Jan 7 10:58:06 UTC 2014


commit c5b74d70a3879a2440c9b0bb704a1fd5fd42862b
Author: Tomas Mraz <tmraz at fedoraproject.org>
Date:   Tue Jan 7 11:57:56 2014 +0100

    dh->q might be NULL.

 openssl-1.0.1e-new-fips-reqs.patch |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/openssl-1.0.1e-new-fips-reqs.patch b/openssl-1.0.1e-new-fips-reqs.patch
index 59b3e90..7054955 100644
--- a/openssl-1.0.1e-new-fips-reqs.patch
+++ b/openssl-1.0.1e-new-fips-reqs.patch
@@ -29,7 +29,7 @@ diff -up openssl-1.0.1e/crypto/dh/dh_check.c.fips-reqs openssl-1.0.1e/crypto/dh/
  	if (BN_cmp(pub_key,q)>=0)
  		*ret|=DH_CHECK_PUBKEY_TOO_LARGE;
 +#ifdef OPENSSL_FIPS
-+	if (FIPS_mode())
++	if (FIPS_mode() && dh->q != NULL)
 +		{
 +		BN_CTX *ctx = NULL;
  


More information about the scm-commits mailing list