We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Calls to the OpenSSL EVP API are not being error-checked in the SHA2 code. We should be using the OQS_OPENSSL_GUARD macro here.
OQS_OPENSSL_GUARD
liboqs/src/common/sha2/sha2_ossl.c
Lines 16 to 25 in 4cc8884
We could also use the macro here instead of error-checking manually:
liboqs/src/common/rand/rand_nist.c
Lines 59 to 70 in 4cc8884
Reported by @trailofbits in Week 1 of their audit of liboqs.
liboqs
The text was updated successfully, but these errors were encountered:
SWilson4
Successfully merging a pull request may close this issue.
Calls to the OpenSSL EVP API are not being error-checked in the SHA2 code. We should be using the
OQS_OPENSSL_GUARD
macro here.liboqs/src/common/sha2/sha2_ossl.c
Lines 16 to 25 in 4cc8884
We could also use the macro here instead of error-checking manually:
liboqs/src/common/rand/rand_nist.c
Lines 59 to 70 in 4cc8884
Reported by @trailofbits in Week 1 of their audit of
liboqs
.The text was updated successfully, but these errors were encountered: