Skip to content

Lack of nullptr check in src/crypto/crypto_context.cc NewRootCertStore #56694

@wooffie

Description

@wooffie

Version

20.18.0

Platform

any

Subsystem

crypto

What steps will reproduce the bug?

In this function X509_STORE* store not checked for nullptr. It may cause null pointer dereference.

X509_STORE* store = X509_STORE_new();

How often does it reproduce? Is there a required condition?

X509_STORE_new returns null

What is the expected behavior? Why is that the expected behavior?

Checking result of X509_STORE_new against nullptr

What do you see instead?

Lack of check

Additional information

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Reporter: Burkov Egor ([email protected]).

Organization: R-Vision ([email protected]).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions