Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Protecting from NULL parameters #350

Merged
merged 4 commits into from
Feb 12, 2024
Merged

Protecting from NULL parameters #350

merged 4 commits into from
Feb 12, 2024

Conversation

baentsch
Copy link
Member

@baentsch baentsch commented Feb 9, 2024

This adds more protections against incorrect use of the OpenSSL<->provider API, notably incorrect NULL pointers passed.

Thanks again to @pcwizz for pointing these out. Please check that the issues found are indeed resolved with this PR.

This PR also updates missing release information in SECURITY.md.

@baentsch baentsch marked this pull request as ready for review February 9, 2024 07:15
@baentsch baentsch requested review from a user, bhess and dstebila February 9, 2024 07:15
Copy link

@pcwizz pcwizz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can confirm this PR addresses the issues I reported,

oqsprov/oqs_kmgmt.c Outdated Show resolved Hide resolved
Copy link
Member

@bhess bhess left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link

@ghost ghost left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM too. Thank you @baentsch !

@baentsch baentsch merged commit 510fea6 into main Feb 12, 2024
44 checks passed
@baentsch baentsch deleted the mb-ros4 branch February 12, 2024 14:42
feventura pushed a commit to EntrustCorporation/oqs-provider that referenced this pull request Mar 13, 2024
* guard against possible NULL parameters passed

* fix SECURITY status [skip ci]

Signed-off-by: Felipe Ventura <felipe.ventura@entrust.com>
feventura pushed a commit to EntrustCorporation/oqs-provider that referenced this pull request Mar 16, 2024
* guard against possible NULL parameters passed

* fix SECURITY status [skip ci]

Signed-off-by: Felipe Ventura <felipe.ventura@entrust.com>
feventura pushed a commit to EntrustCorporation/oqs-provider that referenced this pull request Mar 17, 2024
* guard against possible NULL parameters passed

* fix SECURITY status [skip ci]

Signed-off-by: Felipe Ventura <felipe.ventura@entrust.com>
feventura pushed a commit to EntrustCorporation/oqs-provider that referenced this pull request Mar 17, 2024
* guard against possible NULL parameters passed

* fix SECURITY status [skip ci]

Signed-off-by: Felipe Ventura <felipe.ventura@entrust.com>
feventura pushed a commit to EntrustCorporation/oqs-provider that referenced this pull request Mar 17, 2024
* guard against possible NULL parameters passed

* fix SECURITY status [skip ci]

Signed-off-by: Felipe Ventura <felipe.ventura@entrust.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants