Overview
Request 88591 accepted
- AES-NI: Check the return value of Engine_add()
if the ENGINE_add() call fails: it ends up adding a reference
to a freed up ENGINE which is likely to subsequently contain garbage
This will happen if an ENGINE with the same name is added multiple
times,for example different libraries. [bnc#720601] (forwarded request 88590 from elvigia)
Request History
elvigia created request
- AES-NI: Check the return value of Engine_add()
if the ENGINE_add() call fails: it ends up adding a reference
to a freed up ENGINE which is likely to subsequently contain garbage
This will happen if an ENGINE with the same name is added multiple
times,for example different libraries. [bnc#720601] (forwarded request 88590 from elvigia)
coolo added a reviewer
Please review sources
saschpe approved review
Reviewed by saschpe
coolo accepted request
licensedigger accepted review
{"approve": "license and version number unchanged: 1.0.0e"}
coolo accepted review
Builds for repo openSUSE_Factory
Output of check script (non-fatal):
- package has baselibs.conf: (unchanged)
(W) openssl.spec: patch 3 CVE-2010-1633_and_CVE-2010-0742.patch is commented out
(W) openssl.spec: patch 4 patchset-19727.diff is commented out
(W) openssl.spec: patch 5 CVE-2010-2939.patch is commented out
(W) openssl.spec: patch 6 CVE-2010-3864.patch is commented out
(W) openssl.spec: patch 8 CVE-2011-0014.patch is commented out
saschpe accepted review
Reviewed by saschpe
