NLnetLabs / ldns

LDNS is a DNS library that facilitates DNS tool programming
https://nlnetlabs.nl/ldns
BSD 3-Clause "New" or "Revised" License
285 stars 94 forks source link

Don't rely on libcrypto returning static buffers #240

Closed botovq closed 1 month ago

botovq commented 1 month ago

ldns is one of very few applications relying on being able to pass NULL as last argument to the one-step hashing functions. BoringSSL has removed this functionality in 2017 1 and LibreSSL 4.0 will do the same. Applications can pass in a correctly-sized buffer on the stack.