components/library/openssl/common/patches/040-uninitialized_ctx.patch

   1 #
   2 # This was developed in house.  Upstreadm notified (PR#277).
   3 #
   4 diff -ru  openssl-1.0.1m/crypto/evp/evp_enc.c openssl-1.0.1m/crypto/evp/evp_enc.c.new
   5 --- openssl-1.0.1m/crypto/evp/evp_enc.c Thu May  7 09:46:32 2015
   6 +++ openssl-1.0.1m/crypto/evp/evp_enc.c.new     Thu May  7 09:46:23 2015
   7 @@ -185,6 +185,7 @@
   8                  EVPerr(EVP_F_EVP_CIPHERINIT_EX, ERR_R_MALLOC_FAILURE);
   9                  return 0;
  10              }
  11 +            (void) memset(ctx->cipher_data, 0, ctx->cipher->ctx_size);
  12          } else {
  13              ctx->cipher_data = NULL;
  14          }