openssl/test/params_api_test.c, branch dependabot/github_actions/actions/setup-python-7

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

Test OSSL_PARAM_clear_free()

2025-10-22T19:08:38Z

Signed-off-by: Simo Sorce Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/28108)

Copyright year updates

2025-09-02T13:05:45Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Release: yes

Fix nullpointer dereference in OSSL_PARAM_merge

2025-06-30T10:11:39Z

OSSL_PARAM_merge contained an error, where a nullpointer was dereferenced when both parameter arrays ended with the same key Reviewed-by: Tomas Mraz Reviewed-by: Tim Hudson Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/27910)

Fix buggy stringop-overflow error on s390

2025-06-20T15:00:08Z

Despite some recent changes to our s390 builds, we're still seeing errors due to some stringop-overflow warnings: https://github.com/openssl/openssl/actions/runs/15748518222/job/44389197443 It appears to be caused because the static analysis that gcc preforms in gcc 12 (the version of the compiler on our s390 runner), fails to infer the proper sizes of the buffer on which we do the reverse memcpy in swap_copy(), resulting in warnings, which on --strict-warnings builds, breaks us. Fix it by using inlen rather than outlen to limit the copy length, adjusting it if need be to match the size of the output buffer in le_copy(). This allows the compiler to properly infer the array length constraints and suppress the warnings. Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/27864)

Silence -Wstringop-overflow warnings with gcc 14 on s390x

2025-06-10T17:47:34Z

Compiling OpenSSL on s390x with gcc 14 (i.e. in Fedora 41) shows several -Wstringop-overflow warnings in providers/implementations/rands/drbg_ctr.c and test/params_api_test.c. Add explicit length checks to let the compiler know that it won't overrun the buffer. This also silences the warnings. Signed-off-by: Ingo Franzki Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27710)

Fix silent error in EVP_CIPHER_CTX_get_updated_iv.

2025-04-16T07:44:12Z

Added new params API function OSSL_PARAM_set_octet_string_or_ptr to only call the correct setter for OSSL_CIPHER_PARAM_IV and OSSL_CIPHER_PARAM_UPDATED_IV. Both OSSL_PARAM_set_octet_string and OSSL_PARAM_set_octet_ptr could be called with only one expected to succeed. This would put a silent error on the error stack when calling EVP_CIPHER_CTX_get_updated_iv. Fixes #27117 Reviewed-by: Paul Dale Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/27120)

Copyright year updates

2024-04-09T11:43:26Z

Reviewed-by: Neil Horman Release: yes (cherry picked from commit 0ce7d1f355c1240653e320a3f6f8109c1f05f8c0) Reviewed-by: Hugo Landau Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/24034)

Check appropriate OSSL_PARAM_get_* functions for NULL

2024-01-09T15:56:55Z

The base type OSSL_PARAM getters will NULL deref if they are initalized as null. Add NULL checks for those parameters that have no expectation of returning null (int32/64/uint32/64/BN). Other types can be left as allowing NULL, as a NULL setting may be meaningful (string, utf8str, octet string, etc). Reviewed-by: Matt Caswell Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/23083)

Update copyright year

2022-05-03T12:34:51Z

Reviewed-by: Tomas Mraz Release: yes