openssl/apps/cmp.c, branch openssl-3.4.5

Copyright year updates

2026-04-07T12:31:52Z

Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Apr 7 12:31:53 2026 Release: yes

apps/cmp.c: fix leak of out_trusted in setup_verification_ctx()

2026-03-24T17:35:19Z

setup_verification_ctx() allocates out_trusted via load_trusted() and passes it to OSSL_CMP_CTX_set_certConf_cb_arg(). Since the argument is not consumed, it must be freed on failure. The fix is to free out_trusted if OSSL_CMP_CTX_set_certConf_cb_arg() fails. Fixes #30377 Signed-off-by: huanghuihui0904 <625173@qq.com> Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Tue Mar 24 17:34:49 2026 (Merged from https://github.com/openssl/openssl/pull/30392) (cherry picked from commit 6f01df42cd0fff76dc789e50f5f86addd6103192)

Added NULL Pointer check to the print_keyspec function

2026-02-19T13:24:36Z

The function print_keyspec in apps/cmp.c previously dereferenced the 'alg' pointer without checking if it was NULL: if (paramtype == V_ASN1_UNDEF || alg->parameter == NULL) { In certain situations, the 'alg' pointer could be NULL, which may result in a null pointer dereference. This commit adds an explicit null check for 'alg' before dereferencing 'alg->parameter' to ensure safe handling: if (alg == NULL) { BIO_puts(mem, "Key algorithm: \n"); break; } This prevents potential crashes when print_keyspec is called with a NULL algorithm pointer, improving the robustness of the CMP application. Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Matt Caswell MergeDate: Thu Feb 19 13:24:38 2026 (Merged from https://github.com/openssl/openssl/pull/30046)

3.4-POST-CLANG-FORMAT-WEBKIT

2025-12-09T13:48:07Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Norbert Pocs (Merged from https://github.com/openssl/openssl/pull/29260)

Copyright year updates

2025-07-01T11:55:48Z

Reviewed-by: Matt Caswell Reviewed-by: Neil Horman Release: yes

apps/cmp.c: Free bio on error to avoid memory leak

2025-05-27T17:52:21Z

Call BIO_free() to release bio if ASN1_i2d_bio_of() fails, preventing a memory leak. Fixes: 6a3579e190 ("CMP: add support for requesting cert template using genm/genp") Signed-off-by: JiashengJiang Reviewed-by: Shane Lontis Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27647) (cherry picked from commit e0ae801728776b53e2be0972846072ce32bea304)

APPS/cmp.c: fix char encoding of subject, issuer, sender, and recipient DN

2025-05-13T12:09:09Z

Fixes #27572 Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27592) (cherry picked from commit 35e431ed6daa894ee5385363cf4cfe4954312e4d)

CMP: add support for requesting cert template using genm/genp

2024-06-20T11:38:13Z

Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/24409)

CMP app: fix combination of -certout and -chainout with equal filename argument

2024-06-18T17:52:57Z

Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Reviewed-by: Todd Short (Merged from https://github.com/openssl/openssl/pull/24267)

CMP: Improvements of the support for requesting CRL

2024-05-01T12:59:39Z

Reviewed-by: David von Oheimb Reviewed-by: Todd Short Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/23768)