From aa05eb2879b0b1a5b6b630314bf51a1cb89b5ba6 Mon Sep 17 00:00:00 2001 From: Daniel Pouzzner Date: Mon, 27 Dec 2021 17:59:28 -0600 Subject: [PATCH] wolfcrypt/src/evp.c: fix wolfSSL_EVP_CIPHER_CTX_ctrl() null pointer passed to XMEMCPY(), found by sanitizers under gcc-11.2.1. --- wolfcrypt/src/evp.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/wolfcrypt/src/evp.c b/wolfcrypt/src/evp.c index d1e328cc3..3db06bf1b 100644 --- a/wolfcrypt/src/evp.c +++ b/wolfcrypt/src/evp.c @@ -4817,7 +4817,8 @@ int wolfSSL_EVP_MD_type(const WOLFSSL_EVP_MD* type) /* OpenSSL increments the IV. Not sure why */ IncCtr(ctx->iv, ctx->ivSz); /* Clear any leftover AAD. */ - XMEMSET(ctx->gcmAuthIn, 0, ctx->gcmAuthInSz); + if (ctx->gcmAuthIn != NULL) + XMEMSET(ctx->gcmAuthIn, 0, ctx->gcmAuthInSz); ctx->gcmAuthInSz = 0; ret = WOLFSSL_SUCCESS; break;