Guy Harris
changed
bug 11507
| What |
Removed |
Added |
| Hardware |
x86-64
|
All
|
| Version |
unspecified
|
1.12.7
|
| OS |
Ubuntu
|
All
|
Comment # 6
on bug 11507
from Guy Harris
The AES key was shorter than 128 bits; AES_unwrap() returns a null pointer if
handed a too-short key, and we then dereference it.
Fixed in master and the 1.12 branch, so this could probably happen in 1.12.x
(and before). We now check the AES key length and just give up if it's less
than 128 bits (16 bytes).
You are receiving this mail because:
- You are watching all bug changes.