Qingpeng Du
Qingpeng Du
Thank you for updating the code.
This bug was discovered through fault injection testing on the OpenSSL 1.1 library. I injected faults to force the X509_STORE_CTX_get_ex_data() function to return NULL, which exposed this vulnerability. **Reproduction Steps:**...
Thank you for the quick fix and analysis.
This bug was discovered through fault injection testing on the OpenSSL 1.1 library. By injecting faults to force ASN1_STRING_get0_data() to return NULL, this vulnerability can be reproduced. **Reproduction Steps:** 1....
Thank you for the quick fix and analysis.