openssl/crypto/encode_decode, branch openssl-3.2

Copyright year updates

2025-07-01T12:04:53Z

Reviewed-by: Matt Caswell Reviewed-by: Neil Horman Release: yes

Encoder : Fix floating pointer when OSSL_ENCODER_to_data() is called

2025-02-28T12:57:39Z

twice. Fixes #26862 This only happens when using the FIPS provider, since it needs to export the key. Reviewed-by: Tim Hudson Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz Reviewed-by: Viktor Dukhovni (Merged from https://github.com/openssl/openssl/pull/26891) (cherry picked from commit c2f4d7aae1c7c726eb1f8226d3d454dfd9754758)

Fix EVP_PKEY_print_private() so that it works with non default providers.

2024-11-29T16:12:11Z

At some point in time it was decided that the EC keymanagers ec_export() function would only allow the selection to be both the public + private parts. If just the private element is selected it returns an error. Many openssl commandline apps use EVP_PKEY_print_private() which passes EVP_PKEY_PRIVATE_KEY to the encoder. This selection propagates to encoder_construct_pkey(). For external providers (such as the fips provider this will call the keymanagers export() with the selection set to just the private part. So we either need to 1) change the selection in EVP_PKEY_print_private() or 2) modify the selection used in the export used in encoder_construct_pkey 3) Change the ec_export to allow this. I have chosen 2) but I am not sure if this is the correct thing to do or whether it should conditionally do this when the output_type == 'text'. Issue was reported by Ilia Okomin (Oracle). Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26004) (cherry picked from commit 79c98fc6ccab49f02528e06cc046ac61f841a753)

Copyright year updates

2024-06-04T12:58:30Z

Reviewed-by: Neil Horman Release: yes

Check for NULL cleanup function before using it in encoder_process

2024-02-16T14:11:41Z

encoder_process assumes a cleanup function has been set in the currently in-use encoder during processing, which can lead to segfaults if said function hasn't been set Add a NULL check for this condition, returning -1 if it is not set Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/23069) (cherry picked from commit cf57c3ecfa416afbc47d36633981034809ee6792)

ossl_decoder_cache_flush(): Do not raise an error if there is no cache

2023-12-06T12:59:40Z

This function can be called during OPENSSL_cleanup() when the cache was already flushed and deallocated. Fixes #22939 Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/22941) (cherry picked from commit 0541fa7802cf0c3a9b28d126066c909736fc5ec8)

Copyright year updates

2023-09-07T08:59:15Z

Reviewed-by: Richard Levitte Release: yes

Fix a leak in ossl_encode_ctx_setup_for_pkey

2023-08-23T15:01:30Z

Make sure we free the stack of names we allocated in an error path. Found by the reproducible error patch in #21668 Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/21796)

Fix a leak in an error path when duplicating an OSSL_DECODER_CTX.

2023-08-17T07:06:43Z

Make sure we free process_data_dest if it is not actually used. Found by the reproducible error patch in #21668 Reviewed-by: Tomas Mraz Reviewed-by: Tom Cosgrove Reviewed-by: Hugo Landau (Merged from https://github.com/openssl/openssl/pull/21741)

Fix decoders so that they use the passed in propq.

2023-08-16T16:02:51Z

Fixes #21198 decoder objects were setting propq as NULL. Added a set_ctx/settable_ctx to all decoders that should supply a property query parameter to internal functions. Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/21219)