openssl/fuzz/provider.c, branch dependabot/github_actions/actions/setup-python-7

Fix fuzz test to handle memory failures

2026-07-15T16:01:30Z

It also fixes related memory leaks and removes extensive asserts that should not be present in fuzzy tests. Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz MergeDate: Wed Jul 15 16:01:42 2026 (Merged from https://github.com/openssl/openssl/pull/30944)

fuzz/provider.c: check evp##_up_ref return value in collect_##evp

2026-07-02T07:26:18Z

Coverity has reported an unchecked result of an evp##_up_ref call that is checked elsewhere. Rewrite the collect routine to try to do the up_ref first, and then call free if push doesn't succeed. Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1695451 Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1695454 Fixes: f3b988dc2951 "Add provider fuzzer" Reviewed-by: Nikola Pajkovsky Reviewed-by: Paul Dale MergeDate: Thu Jul 2 07:26:22 2026 (Merged from https://github.com/openssl/openssl/pull/31792)

Fix clang-format: remove leading space from err label

2026-03-11T20:58:36Z

Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:54 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

Remove unnecessary comments and extra blank line

2026-03-11T20:58:36Z

Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:51 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

Remove unnecessary caps in key/iv initialization loops

2026-03-11T20:58:36Z

Drop the `&& i < 16` and `&& i < 8` guards that were carried over from the original fixed-size arrays. The loops now fill the entire heap-allocated buffer, with values wrapping naturally via unsigned char. Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:49 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

Refactor do_evp_cipher error paths to use goto err

2026-03-11T20:58:36Z

Initialize key, iv, and ctx to NULL at declaration and consolidate all cleanup into a single err label, as suggested by @npajkovsky. Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:47 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

fuzz/provider.c: fix API call order in do_evp_cipher and do_evp_md

2026-03-11T20:58:36Z

Both do_evp_cipher() and do_evp_md() call the parameter-setting function (EVP_CIPHER_CTX_set_params / EVP_MD_CTX_set_params) before initializing the algorithm context (EVP_EncryptInit_ex2 / EVP_DigestInit_ex2). Since the context has no algorithm associated at that point, set_params always returns 0 and the function early-returns, making the cipher and digest paths dead code (~20% of all fuzzer inputs). Fix by swapping the call order so the context is initialized first. Additionally, heap-allocate key/iv buffers sized to the cipher's actual key and IV length, since some ciphers (e.g. DES-EDE3-OFB) require buffers larger than the previous fixed 16/8-byte arrays. Fixes #30281 Reviewed-by: Neil Horman Reviewed-by: Kurt Roeckx MergeDate: Wed Mar 11 20:58:44 2026 (Merged from https://github.com/openssl/openssl/pull/30331)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

fuzz/provider.c: Add check for OPENSSL_malloc() to avoid potential NULL pointer dereference

2026-01-10T14:35:49Z

Add check for the return value of OPENSSL_malloc() to avoid potential NULL pointer dereference. Fixes: f3b988d ("Add provider fuzzer") Signed-off-by: Jiasheng Jiang Reviewed-by: Paul Dale Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/27868)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)