openssl/test/conf_parse_list_test.c, branch masterTLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=master2026-10-09T21:25:56ZCONF: reject a NUL list separator in CONF_parse_list()2026-10-09T21:25:56ZDarren Carrerascarrerasdarren@gmail.com2026-09-04T15:07:18Zurn:sha1:a502c66ce4d8784c2a1f3c195fd876f19fbe8392
CONF_parse_list() treated any integer separator that converts to NUL
as a match for the input string terminator. After processing the final
element, the loop advanced beyond the input and searched
from that invalid pointer on the next iteration.
Reject every NUL-equivalent separator before parsing and raise
ERR_R_PASSED_INVALID_ARGUMENT. Add a regression test that verifies
the direct NUL value and positive/negative integer aliases, confirms
that no callback is invoked, checks the error queue, and checks
that normal comma-separated parsing keeps working as expected.
Resolves: https://github.com/openssl/openssl/issues/32667
Fixes: df5eaa8a5297 "default_algorithms option in ENGINE config."
Reported-by: x-ray-z
Assisted-by: OpenAI Codex:gpt-5.6-sol
Reviewed-by: Mounir Idrassi <mounir.idrassi@idrix.fr>
Reviewed-by: Daniel Kubec <kubec@openssl.foundation>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Merge-date: Fri Oct 9 21:25:58 2026
Merged-from: https://github.com/openssl/openssl/pull/32684