Skip to content

Checked RAND_bytes() result when creating bootstrap_id.dat - #6498

Merged
nickanderson merged 1 commit into
cfengine:masterfrom
nickanderson:bootstrap-id-rand-check
Nov 12, 2026
Merged

nickanderson merged 1 commit into
cfengine:masterfrom
nickanderson:bootstrap-id-rand-check

Conversation

@nickanderson

Copy link
Copy Markdown
Member

CreateBootstrapIDFile() ignored RAND_bytes() failure and would write an id from an uninitialized buffer; it now logs an error and returns NULL before opening the file.

@nickanderson
nickanderson requested a review from larsewi November 11, 2026 22:53
@larsewi

larsewi commented Nov 12, 2026

Copy link
Copy Markdown
Contributor

@cf-bottom Jenkins please :)

@cf-bottom

Copy link
Copy Markdown

@nickanderson nickanderson added the cherry-pick? Fixes which may need to be cherry-picked to LTS branches label Nov 12, 2026
@nickanderson
nickanderson merged commit b5db5f0 into cfengine:master Nov 12, 2026
47 checks passed
@github-actions

Copy link
Copy Markdown
Contributor

Backport to 3.27.x: #6502

@github-actions

Copy link
Copy Markdown
Contributor

Backport to 3.24.x: #6503

@github-actions github-actions Bot removed the cherry-pick? Fixes which may need to be cherry-picked to LTS branches label Nov 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants