[Pkg-openssl-devel] Bug#829108: Bug#829108: libssl-dev: HMAC_Init_ex incompatible change (possibly doc bug)

[Kurt Roeckx]

forwarded 829108 https://rt.openssl.org/Ticket/Display.html?id=4603&user=guest&pass=guest
thanks


On Thu, Jun 30, 2016 at 05:35:25PM +0200, Marc Lehmann wrote:
> 
> the HMAC manpage states:
> 
>    HMAC_Init_ex() initializes or reuses a HMAC_CTX structure to use the
>    function evp_md and key key. Either can be NULL, in which case the
>    existing one will be reused.
> 
> However, the current code does not allow the key to be zero when evp_md is
> non-zero in all cases:
> 
>     /* If we are changing MD then we must have a key */
>     if (md != NULL && md != ctx->md && (key == NULL || len < 0))
>         return 0;

Forwarded upstream.


Kurt