X509v3_addr_canonize(): Check whether addr == NULL

Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Tim Hudson <[email protected]> (Merged from openssl/openssl#26583)
ibmruntimes · Mar 3, 2025 · d3b6b81 · d3b6b81
1 parent da44eb2
commit d3b6b81
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/crypto/x509/v3_addr.c b/crypto/x509/v3_addr.c
@@ -912,6 +912,11 @@ int X509v3_addr_canonize(IPAddrBlocks *addr)
 {
     int i;
 
+    if (addr == NULL) {
+        ERR_raise(ERR_LIB_X509V3, X509V3_R_INVALID_NULL_ARGUMENT);
+        return 0;
+    }
+
     for (i = 0; i < sk_IPAddressFamily_num(addr); i++) {
         IPAddressFamily *f = sk_IPAddressFamily_value(addr, i);