Commit 2c739f72 authored by Rich Salz's avatar Rich Salz
Browse files

Zero-fill IV by default. 



Fixes uninitialized memory read reported by Nick Mathewson

Reviewed-by: default avatarTim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6603)
(cherry picked from commit 10c3c1c1)
parent da0bbdd6

crypto/pem/pem_lib.c

+1 −0
Original line number Diff line number Diff line
@@ -487,6 +487,7 @@ int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher) 
    char **header_pp = &header;



    cipher->cipher = NULL;

    memset(cipher->iv, 0, sizeof(cipher->iv));

    if ((header == NULL) || (*header == '\0') || (*header == '\n'))

        return (1);

    if (strncmp(header, "Proc-Type: ", 11) != 0) {