• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

universal-ctags / target-openssl / 5605997699
68%
target-openssl: 68%

Build:
Build:
LAST BUILD BRANCH: master
DEFAULT BRANCH: target-openssl
Ran 20 Jul 2023 02:25AM UTC
Jobs 1
Files 1355
Run time 19s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

19 May 2023 10:42AM UTC coverage: 68.062% (+0.007%) from 68.055%
5605997699

push

github

t8m
Update hkdf.c to avoid potentially vulnerable code pattern

The expression "if (a+b>c) a=c-b" is incorrect if "a+b" overflows.
It should be replaced by "if (a>c-b) a=c-b", which avoids the
potential overflow and is much easier to understand.

This pattern is the root cause of CVE-2022-37454, a buffer overflow
vulnerability in the "official" SHA-3 implementation.

It has been confirmed that the addition in
https://github.com/openssl/openssl/blob/master/providers/implementations/kdfs/hkdf.c#L534
cannot overflow. So this is only a minor change proposal to avoid
a potentially vulnerable code pattern and to improve readability.
More information: https://github.com/github/codeql/pull/12036#issuecomment-1466056959

CLA: trivial

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20990)

1 of 1 new or added line in 1 file covered. (100.0%)

172867 of 253986 relevant lines covered (68.06%)

2334263.54 hits per line

Uncovered Existing Lines

Lines Coverage ∆ File
1
77.63
-0.34% crypto/bn/bn_prime.c
1
78.49
-0.29% test/quic_stream_test.c
Jobs
ID Job ID Ran Files Coverage
1 5605997699.1 20 Jul 2023 02:25AM UTC 1355
68.06
GitHub Action Run
Source Files on build 5605997699
  • Tree
  • List 1355
  • Changed 260
  • Source Changed 0
  • Coverage Changed 260
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #5605997699
  • 56a51b5a on github
  • Prev Build on master (#5582604495)
  • Delete
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2025 Coveralls, Inc