<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openssl/fuzz/cms_verify.c, branch master</title>
<subtitle>TLS/SSL and crypto library.</subtitle>
<id>http://git.bktus.com/gpgfrontend/openssl/atom?h=master</id>
<link rel='self' href='http://git.bktus.com/gpgfrontend/openssl/atom?h=master'/>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/'/>
<updated>2026-09-15T14:59:52Z</updated>
<entry>
<title>Add cms_verify fuzzer</title>
<updated>2026-09-15T14:59:52Z</updated>
<author>
<name>Greensi7</name>
<email>adam.tabak04@gmail.com</email>
</author>
<published>2026-08-11T22:27:22Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=faaef82348e2e98e03c85f22658ed2d41a023257'/>
<id>urn:sha1:faaef82348e2e98e03c85f22658ed2d41a023257</id>
<content type='text'>
Fuzz CMS_verify() with CMS_NO_SIGNER_CERT_VERIFY
to exercise signature verification without requiring
trusted certificate store.

Motivated by : CVE-2026-45447 which affects PKCS7_verify(),
and add coverage for similar CMS_verify().

Assisted-by: ChatGPT:gpt-5.6
Reviewed-by: Jakub Zelenka &lt;jakub.zelenka@openssl.foundation&gt;
Reviewed-by: Milan Broz &lt;mbroz@openssl.org&gt;
Merge-date: Tue Sep 15 15:00:01 2026
Merged-from: https://github.com/openssl/openssl/pull/32342
</content>
</entry>
</feed>
