{"schema":"libjg2-1", "vpath":"/git/", "avatar":"/git/avatar/", "alang":"", "gen_ut":1762032616, "reponame":"openssl", "desc":"OpenSSL", "owner": { "name": "Andy Green", "email": "andy@warmcat.com", "md5": "c50933ca2aa61e0fe2c43d46bb6b59cb" },"url":"https://warmcat.com/repo/openssl", "f":3, "items": [ {"schema":"libjg2-1", "cid":"329a9bc5ba8836b3a79595557ceac137", "commit": {"type":"commit", "time": 1557244471, "time_ofs": 60, "oid_tree": { "oid": "78b59c777e25d0dc0a4271e0f7a76a97ff11666e", "alias": []}, "oid":{ "oid": "8f506274029903457c5f1d8663a012763f55cd37", "alias": []}, "msg": "Reject obviously invalid DSA parameters during signing", "sig_commit": { "git_time": { "time": 1557244471, "offset": 60 }, "name": "Matt Caswell", "email": "matt@openssl.org", "md5": "10f7b441a32d5790efad9fc68cae4af2" }, "sig_author": { "git_time": { "time": 1556895368, "offset": 60 }, "name": "Matt Caswell", "email": "matt@openssl.org", "md5": "10f7b441a32d5790efad9fc68cae4af2" }}, "body": "Reject obviously invalid DSA parameters during signing\n\nFixes #8875\n\nReviewed-by: Paul Dale \u003cpaul.dale@oracle.com\u003e\n(Merged from https://github.com/openssl/openssl/pull/8876)\n\n(cherry picked from commit 9acbe07d2300d34a7ea846d9756f33b4595e32fb)\n" , "diff": "diff --git a/crypto/dsa/dsa_ossl.c b/crypto/dsa/dsa_ossl.c\nindex 7a0b087..0c22d41 100644\n--- a/crypto/dsa/dsa_ossl.c\n+++ b/crypto/dsa/dsa_ossl.c\n@@ -190,6 +190,12 @@ static int dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in,\n return 0;\n }\n \n+ /* Reject obviously invalid parameters */\n+ if (BN_is_zero(dsa-\u003ep) || BN_is_zero(dsa-\u003eq) || BN_is_zero(dsa-\u003eg)) {\n+ DSAerr(DSA_F_DSA_SIGN_SETUP, DSA_R_INVALID_PARAMETERS);\n+ return 0;\n+ }\n+\n k \u003d BN_new();\n l \u003d BN_new();\n if (k \u003d\u003d NULL || l \u003d\u003d NULL)\n","s":{"c":1762032616,"u": 61911}} ],"g": 62884,"chitpc": 0,"ehitpc": 0,"indexed":0 , "ab": 0, "si": 0, "db":0, "di":0, "sat":0, "lfc": "0000"}