Improper use of negative value found by Coverity. In test/ecdsatest.c: static int test_builtin(int n) { ... size_t sig_len; // type should be an int negative_return_fn: Function ECDSA_size(eckey) r...

The vast majority of files have the following line which refers to the license: Licensed under the Apache License 2.0 (the "License"). A few files (43, as per grep+wc) still conta...

An extra null pointer check is not needed in functions like the following. LEdge Range_tree_1 Scene_mcf_item

Have just built OpenSSL 1.1.1b, and unit tests in other software failed to build because SHA support is no longer present. https://www.openssl.org/docs/man1.1.1/man3/SHA1_Init.html states &quot...

zeek/zeek#997 describes a way to output Zeek logs via zeek-cut that cannot be read by current zq as of commit fb5a196. $ echo '{"foo": "bar"}' | ...

In the manual of master and v1.1.1. (also may in the more older versions) At detail of the BN_mask_bits. (https://www.openssl.org/docs/manmaster/man3/BN_mask_bits.html) (https://www.openssl.org/doc...

++ and -- aren't required, but we should have them. https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3_chap02.html#tag_18_06_04

Running yarn test:unit gives error yarn test yarn run v1.22.4 $ jest App Expected react-native/jest-preset to define transform[^.+\.(bmp|gif|jpg|jpeg|mp4|png|psd|svg|webp)$] react-native/jest-prese...

This was partially discussed in #8431, in which we added support to pkeyutl, through the new 3.0 -rawin argument, to support "oneshot" sign/verify operations (such as Ed25519/Ed44...

Hi, there are some calls to CRYPTO_zalloc that miss return value checking: openssl/providers/implementations/macs/poly1305_prov.c Lines 46 to 48 in 77fedcd struct poly1305_data_st *ctx = OPENSSL_za...

Hi, From url "https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set1_chain_cert_store.html " I only found set function for chain_store. Will openssl add a get chain_store functi...

Can you add Blake3 support to openssl? It's over 10x faster than sha2 and will probably be widely adopted.

The return type of BIO_ptr_ctrl is according to every version of the documentation char*. However, in the header file (bio.h), the return type is void* (at least on master and in version 1.1.1).

I am using openssl 3.0: MAJOR=3 MINOR=0 PATCH=0 PRE_RELEASE_TAG= BUILD_METADATA= RELEASE_DATE="7 sep 2021" SHLIB_VERSION=3 when compiling source code that uses self_test.h with g+...

https://esphome.github.io/esp-web-tools/

If you change pages two or more times in quick succession in the Verify tool, before the previous query has completed, captures do not load and loading stops working. At that point, you have to ref...

The code starting at the below line attempts to print output to a handle that has not yet been opened: openssl/apps/x509.c Line 714 in 7fde39d BIO_printf(out, "Certificate request self-sig...

Hello, I'm building OpenSSL on z/OS system, and we have some trouble coming with 3.0.1 (was fine with 3.0) I found the culprit : commit 1682a85 Unfortunately, SIZE_MAX might not be defined ...

BN_mod_exp2_mont accesses the data field of the modulus without checking if it is allocated: openssl/crypto/bn/bn_exp2.c Line 35 in 77f3936 if (!(m->d[0] & 1)) { So calling BN_mod_ex...

When the scope events command is run, events are displayed in the order in which they are flushed to disk/network, which isn't always entirely chronological. For example, console events are...