Skip to content

Lack of nullptr check in src/crypto/crypto_context.cc NewRootCertStore #56694

Description

@wooffie

Version

20.18.0

Platform

any

Subsystem

crypto

What steps will reproduce the bug?

In this function X509_STORE* store not checked for nullptr. It may cause null pointer dereference.

X509_STORE* store = X509_STORE_new();

How often does it reproduce? Is there a required condition?

X509_STORE_new returns null

What is the expected behavior? Why is that the expected behavior?

Checking result of X509_STORE_new against nullptr

What do you see instead?

Lack of check

Additional information

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Reporter: Burkov Egor (eburkov@rvision.ru).

Organization: R-Vision (support@rvision.ru).

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions