Skip to content

Issue 22076 - Fix regressions in dupctx testing #22082#22102

Closed
nhorman wants to merge 2 commits intoopenssl:masterfrom
nhorman:22076
Closed

Issue 22076 - Fix regressions in dupctx testing #22082#22102
nhorman wants to merge 2 commits intoopenssl:masterfrom
nhorman:22076

Conversation

@nhorman
Copy link
Copy Markdown
Contributor

@nhorman nhorman commented Sep 14, 2023

Hit a few regressions in dupctx tests from my addition of those methods in the various ciphers. Fix them up

Checklist
  • tests are added or updated

If we ignore the faliure to copy on an old fips provider, we need to use
ctx_base, rather than ctx

Fixes openssl#22076
In the dupctx fixups I missed a pointer that needed to be repointed to
the surrounding structures AES_KEY structure for the sm4/aes/aria
ccm/gcm variants.  This caused a colliding use of the key and possible
use after free issues.

Fixes openssl#22076
@github-actions github-actions bot added the severity: fips change The pull request changes FIPS provider sources label Sep 14, 2023
@t8m t8m added branch: master Applies to master branch approval: review pending This pull request needs review by a committer approval: otc review pending triaged: bug The issue/pr is/fixes a bug tests: present The PR has suitable tests present labels Sep 14, 2023
@t8m t8m added severity: regression The issue/pr is a regression from previous released version and removed approval: otc review pending labels Sep 14, 2023
@t8m t8m requested a review from a team September 14, 2023 10:05
@paulidale paulidale added approval: done This pull request has the required number of approvals and removed approval: review pending This pull request needs review by a committer labels Sep 14, 2023
@t8m t8m added this to the 3.2.0 milestone Sep 15, 2023
@openssl-machine openssl-machine added approval: ready to merge The 24 hour grace period has passed, ready to merge and removed approval: done This pull request has the required number of approvals labels Sep 16, 2023
@openssl-machine
Copy link
Copy Markdown
Collaborator

This pull request is ready to merge

@paulidale
Copy link
Copy Markdown
Contributor

Merged, thanks.

@paulidale paulidale closed this Sep 17, 2023
openssl-machine pushed a commit that referenced this pull request Sep 17, 2023
If we ignore the faliure to copy on an old fips provider, we need to use
ctx_base, rather than ctx

Fixes #22076

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from #22102)
openssl-machine pushed a commit that referenced this pull request Sep 17, 2023
In the dupctx fixups I missed a pointer that needed to be repointed to
the surrounding structures AES_KEY structure for the sm4/aes/aria
ccm/gcm variants.  This caused a colliding use of the key and possible
use after free issues.

Fixes #22076

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from #22102)
wanghao75 pushed a commit to openeuler-mirror/openssl that referenced this pull request Sep 23, 2023
If we ignore the faliure to copy on an old fips provider, we need to use
ctx_base, rather than ctx

Fixes #22076

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from openssl/openssl#22102)

Signed-off-by: fly2x <fly2x@hitls.org>
wanghao75 pushed a commit to openeuler-mirror/openssl that referenced this pull request Sep 23, 2023
In the dupctx fixups I missed a pointer that needed to be repointed to
the surrounding structures AES_KEY structure for the sm4/aes/aria
ccm/gcm variants.  This caused a colliding use of the key and possible
use after free issues.

Fixes #22076

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from openssl/openssl#22102)

Signed-off-by: fly2x <fly2x@hitls.org>
Liu-ErMeng pushed a commit to Liu-ErMeng/openssl that referenced this pull request Dec 21, 2023
In the dupctx fixups I missed a pointer that needed to be repointed to
the surrounding structures AES_KEY structure for the sm4/aes/aria
ccm/gcm variants.  This caused a colliding use of the key and possible
use after free issues.

Fixes openssl#22076

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from openssl#22102)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approval: ready to merge The 24 hour grace period has passed, ready to merge branch: master Applies to master branch severity: fips change The pull request changes FIPS provider sources severity: regression The issue/pr is a regression from previous released version tests: present The PR has suitable tests present triaged: bug The issue/pr is/fixes a bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants