openssl/apps, branch openssl-3.3.5

Copyright year updates

2025-09-30T12:55:37Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Release: yes

apps/storeutl.c: avoid signed integer overflow in indent_printf()

2025-09-25T15:00:27Z

As two arbitrarily large printf return values can trigger signed integer overflow, rewrite the return value handling to avoid it. Fixes: fb43ddceda79 "Add a recursive option to 'openssl storeutl'" Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665428 References: https://github.com/openssl/project/issues/1432 Signed-off-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/28648) (cherry picked from commit 61422fd7e084e63f050ceabf1b0debff801f10ab)

apps/ocsp.c: avoid using NULL resp

2025-09-08T21:09:38Z

There are some code paths where resp is used without a previous check for being non-NULL (specifically, OCSP_response_create() can return NULL, and do_responder() can return -1, that would also lead to resp being NULL). Avoid hitting NULL dereferences by wrapping the code that uses resp in "if (resp != NULL)". Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665155 References: https://github.com/openssl/project/issues/1362 Signed-off-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28407) (cherry picked from commit 6dd7ae2f4103b368cd6b66a053b7a9323c9fb9ad)

apps/enc.c: avoid signed integer overflow on bufsize assignment

2025-09-08T21:09:20Z

The calculated option value, while being long-typed, is not checked for fitting into int-sized bufsize. Avoid overflow by throwing error if it is bigger than INT_MAX and document that behaviour. Fixes: 7e1b7485706c "Big apps cleanup (option-parsing, etc)" Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665149 References: https://github.com/openssl/project/issues/1362 Signed-off-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28407) (cherry picked from commit e8cfa4ef4a91311fd1188b3eee8bfc9c8d9e7695)

apps: remove chopup_args()

2025-09-08T19:22:48Z

The last (and only?) user has been removed in commit eca471391378 "APPS: Drop interactive mode in the 'openssl' program". Complements: eca471391378 "APPS: Drop interactive mode in the 'openssl' program" Signed-off-by: Eugene Syromiatnikov Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28441) (cherry picked from commit 3f77491cb336df843984139fbb6fb16f47daf876)

apps/cms.c: add missing error message on error writing CMS output (ret == 6)

2025-08-18T16:03:38Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27567) (cherry picked from commit 3c7812decde2368168c6cba557ec8c03f973c892)

apps/asn1parse.c: correct help text order for -genstr option

2025-07-31T18:37:50Z

CLA: trivial Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28123) (cherry picked from commit eac588ac360ca16e0f9979b6c70708f1e8991b4f)

openssl rand command should use the loaded library context

2025-07-24T11:27:27Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28075) (cherry picked from commit e7d5398aa1349cc575a5b80e0d6eb28e61cb4bfa)

Copyright year updates

2025-07-01T11:59:57Z

Reviewed-by: Matt Caswell Reviewed-by: Neil Horman Release: yes

Fix exit code for s_time when -new command line switch specified

2025-06-20T19:43:58Z

When operating with the -new switch in apps/openssl s_time, we neglect to set the exit code properly, and so the app exits with a code of 1 rather than 0 as expected Fixes #27856 Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/27857) (cherry picked from commit b6ff5598539bf91608246ed81b4b534cbea6539d)