Qingpeng Du

Results 5 comments of Qingpeng Du

This bug was discovered through fault injection testing on the OpenSSL 1.1 library. I injected faults to force the X509_STORE_CTX_get_ex_data() function to return NULL, which exposed this vulnerability. **Reproduction Steps:**...

Thank you for the quick fix and analysis.

This bug was discovered through fault injection testing on the OpenSSL 1.1 library. By injecting faults to force ASN1_STRING_get0_data() to return NULL, this vulnerability can be reproduced. **Reproduction Steps:** 1....