Add NULL check before accessing PKCS7 encrypted algorithm
authorViliam Lejčík <lejcik@gmail.com>
Mon, 19 Feb 2024 20:39:05 +0000 (21:39 +0100)
committerTomas Mraz <tomas@openssl.org>
Mon, 25 Mar 2024 17:28:28 +0000 (18:28 +0100)
commit09d90f9c472172ba21493754b18e5596c8a68030
treeb5e16974fe0174fb1ef90e497675eb24bae95173
parent0117a020132f30b366feb48978791cc21569e471
Add NULL check before accessing PKCS7 encrypted algorithm

Printing content of an invalid test certificate causes application crash, because of NULL dereference:

user@user:~/openssl$ openssl pkcs12 -in test/recipes/80-test_pkcs12_data/bad2.p12 -passin pass: -info
MAC: sha256, Iteration 2048
MAC length: 32, salt length: 8
PKCS7 Encrypted data: Segmentation fault (core dumped)

Added test cases for pkcs12 bad certificates

Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23632)

(cherry picked from commit a4cbffcd8998180b98bb9f7ce6065ed37d079d8b)
apps/pkcs12.c
test/recipes/80-test_pkcs12.t