openssl/test/pbetest.c, branch dependabot/github_actions/actions/setup-python-7

Add regression test for negative EVP_CIPHER_get_iv_length() in PKCS5_pbe2_set_scrypt

2026-07-20T11:15:11Z

A malicious provider returning SIZE_MAX as IV length causes evp_cipher_cache_constants() to store -1 via size_t->int truncation. Without the ivlen > 0 guard, this leads to memcpy(iv[16], aiv, SIZE_MAX) — a stack buffer overflow. The test registers a fake provider with SIZE_MAX IV length, then calls PKCS5_pbe2_set_scrypt() and asserts it returns NULL without crashing. test for #30510 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Daniel Kubec MergeDate: Mon Jul 20 11:15:18 2026 (Merged from https://github.com/openssl/openssl/pull/30615)

Fix broken hex data by reformatting

2026-06-03T07:46:03Z

The clang format broke some data in hexadecimal format. To make the tool obedient, the trailing comma needs to be removed, then it interpretes the data differently and therefore does not reformat it. The format can then be changed to the correct form. Fixes: https://github.com/openssl/project/issues/1959 Signed-off-by: Norbert Pocs Reviewed-by: Milan Broz Reviewed-by: Eugene Syromiatnikov MergeDate: Wed Jun 3 07:46:14 2026 (Merged from https://github.com/openssl/openssl/pull/31350)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

Copyright year updates

2025-09-02T13:05:45Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Release: yes

test: Silence warnings on Win64 builds

2025-07-02T15:26:26Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/27806)

Copyright year updates

2023-09-07T08:59:15Z

Reviewed-by: Richard Levitte Release: yes

PBE test: load providers if auto config load is turned off

2023-08-04T01:57:27Z

Reviewed-by: Matt Caswell Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/21621)

Fix copyrights

2022-02-03T12:56:38Z

Add copyright to files that were missing it. Update license from OpenSSL to Apache as needed. Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/17606)

Fix building of test/pbetest.c

2021-05-26T00:20:24Z

The test_pkcs5_pbe() function is required twice: once `if !defined OPENSSL_NO_RC4 && !defined OPENSSL_NO_MD5` and once `if !defined OPENSSL_NO_DES && !defined OPENSSL_NO_SHA1` Hence there should be `||` between those. Currently the build fails if the first condition is false, while the second is true. Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/15432)

Add a test for PKCS5_PBE_keyivgen()

2021-05-24T05:23:37Z

Reviewed-by: Shane Lontis Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/14326)