openssl/apps/errstr.c, branch openssl-3.4.5

3.4-POST-CLANG-FORMAT-WEBKIT

2025-12-09T13:48:07Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Norbert Pocs (Merged from https://github.com/openssl/openssl/pull/29260)

Fix some invalid use of sscanf

2023-12-12T16:12:32Z

sscanf can return -1 on an empty input string. We need to appropriately handle such an invalid case. The instance in OSSL_HTTP_parse_url could cause an uninitialised read of sizeof(unsigned int) bytes (typically 4). In many cases this uninit read will immediately fail on the following check (i.e. if the read value >65535). If the top 2 bytes of a 4 byte unsigned int are zero then the value will be <=65535 and the uninitialised value will be returned to the caller and could represent arbitrary data on the application stack. The OpenSSL security team has assessed this issue and consider it to be a bug only (i.e. not a CVE). Reviewed-by: Todd Short Reviewed-by: Tomas Mraz Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/22961)

Check non-option arguments

2020-12-15T10:47:17Z

Make sure all commands check to see if there are any "extra" arguments after the options, and print an error if so. Made all error messages consistent (which is to say, minimal). Fixes: #13527 Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/13563)

Document command parameters.

2019-11-20T08:49:52Z

Add documentation for all commands that have parameters. Fix a couple of minor doc and programming bugs, too. Fixes #10313 Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/10371)

Add "sections" to -help output

2019-11-07T20:08:30Z

Remove "Valid options" label, since all commands have sections (and [almost] always the first one is "General options"). Have "list --options" ignore section headers Reformat ts's additional help Add output section Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/9953)

Following the license change, modify the boilerplates in apps/

2018-12-06T13:15:27Z

Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/7765)

Update copyright year

2018-02-13T13:59:25Z

Reviewed-by: Richard Levitte

apps: Don't include progs.h in apps.h

2018-01-31T22:45:12Z

Everything in apps includes apps.h, because that one declares apps internal library routines. However, progs.h doesn't declare library routines, but rather the main commands and their options, and there's no reason why the library modules should include it. So, remove the inclusion of progs.h from apps.h and add that inclusion in all command source files. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/5222)

Consistent formatting for sizeof(foo)

2017-12-08T00:11:49Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/4872)

Remove parentheses of return.

2017-10-18T15:05:06Z

Since return is inconsistent, I removed unnecessary parentheses and unified them. Reviewed-by: Rich Salz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/4541)