Don't rely on libcrypto returning static buffers

freeswitch / sofia-sip

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification.

GNU Lesser General Public License v2.1

270 stars 175 forks source link

Don't rely on libcrypto returning static buffers #263

Open botovq opened 4 months ago

botovq commented 4 months ago

sofia-sip is one of very few applications relying on being able to pass NULL as last argument to the one-step hashing functions. BoringSSL has removed this functionality in 2017 1 and LibreSSL 4.0 will do the same. Applications can pass in a correctly-sized buffer on the stack.