mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-07-09 14:10:49 +02:00
3ffe25f783
Add `*pp == NULL` checks to three d2i wrappers to prevent NULL deref on public OpenSSL-compat APIs: - d2i_evp_pkey (reachable via wolfSSL_d2i_PublicKey/PrivateKey) - wolfSSL_d2i_OCSP_RESPONSE - wolfSSL_d2i_ECDSA_SIG (template-ASN crash) Also add regression tests for the existing PR fixes: ProcessBuffer negative-size, PemToDer family negative-pemSz, GetCRLInfo negative-sz, wc_Set*Buffer derSz<0, and d2i_ECDSA_SIG negative-length / *pp==NULL.