openssl/apps/lib, branch openssl-3.4.5

Copyright year updates

2026-04-07T12:31:52Z

Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Apr 7 12:31:53 2026 Release: yes

apps/cmp_mock_srv: fix resource leak in process_genm()

2026-03-16T11:19:17Z

If pushing the generated rsp ITAV object into the out stack fails, the error path frees the stack container but permanently abandons the newly allocated rsp object. Explicitly free the rsp structure if it exists and was not pushed successfully to prevent this memory leak. Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Eugene Syromiatnikov MergeDate: Mon Mar 16 11:16:02 2026 (Merged from https://github.com/openssl/openssl/pull/30374) (cherry picked from commit b4a964f6c1313d386c45a747820d82a1a5ec4573)

apps: unload provider on app_provider_load() failure

2026-03-13T08:12:06Z

CLA: trivial Reviewed-by: Paul Dale Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Fri Mar 13 08:12:14 2026 (Merged from https://github.com/openssl/openssl/pull/30314)

fix NULL pointer dereference when pass1 is NULL

2026-03-12T11:33:54Z

Resolves: https://scan5.scan.coverity.com/#/project-view/62622/10222?selectedIssue=1684201 Complements: #adc8e4abd96 Fix Memory leak in app_passwd Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale MergeDate: Thu Mar 12 11:33:59 2026 (Merged from https://github.com/openssl/openssl/pull/30365)

Fix Memory leak in app_passwd

2026-03-10T17:50:42Z

Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Yang Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale MergeDate: Tue Mar 10 17:42:48 2026 (Merged from https://github.com/openssl/openssl/pull/30325) (cherry picked from commit adc8e4abd962b448354756fef24be499278875ae)

Fix const qualifiers from strchr where discarded

2026-02-25T11:07:08Z

This patch fixes several const qualifiers byu adding where required. warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers] Since glibc-2.43 and ISO C23, the functions bsearch, memchr, strchr, strpbrk, strrchr, strstr, wcschr, wcspbrk, wcsrchr, wcsstr and wmemchr that return pointers into their input arrays now have definitions as macros that return a pointer to a const-qualified type when the input argument is a pointer to a const-qualified type. Signed-off-by: Rudi Heitbaum Reviewed-by: Dmitry Belyavskiy Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Neil Horman MergeDate: Wed Feb 25 11:04:09 2026 (Merged from https://github.com/openssl/openssl/pull/30136) (cherry picked from commit 2af8d3b6400ba5f7133cbbd48a557d10af21c6a6)

windows: Remove redundant include

2026-02-13T15:13:32Z

The functions malloc, realloc and free are included from stdlib, therefore no need for redundant malloc.h include. Signed-off-by: Norbert Pocs Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz MergeDate: Fri Feb 13 15:13:13 2026 (Merged from https://github.com/openssl/openssl/pull/29989) (cherry picked from commit d2f54e1b406614efc3248a5da85dfeba1d8eb519)

Copyright year updates

2026-01-27T13:55:05Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Tue Jan 27 13:55:06 2026 Release: yes

Fix a memory leak in sctp code

2026-01-06T13:04:11Z

There is a memory leak of the addrinfo struct when `./openssl s_server -dtls -sctp -accept 127.0.0.1:4433` is used, but `sysctl -w net.sctp.auth_enable=1` is not done before. Additionally this fixes an oversight, when `./openssl s_client -dtls -sctp -connect localhost:4433` is used to connect to above server. The first connect attempt is to IPv6 ::1, which might fail, but the second attempt might still succeed, so continue to try all addesses even when the SCTP socket fails for one of them. Reviewed-by: Neil Horman Reviewed-by: Paul Yang Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/29541) (cherry picked from commit c0a7890b6244cc5620942c3beeb8683f2164560e)

3.4-POST-CLANG-FORMAT-WEBKIT

2025-12-09T13:48:07Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Norbert Pocs (Merged from https://github.com/openssl/openssl/pull/29260)