Repository navigation
crypto: fix X509 curve name crash for non-NIST curves - #66694
Conversation
Signed-off-by: lazerg <lazerg2@gmail.com> Assisted-by: Claude Code
|
Review requested:
|
|
Caution AgentScan found account activity patterns that may be consistent with automation. This is a heuristic, not proof that this pull request was opened by an agent or violates policy. AI-assisted contributions are permitted, but automated tooling must not open pull requests without advance approval, and contributors must personally understand, test, verify, and take responsibility for every submitted change. See the AgentScan analysis, AI use policy, and automation policy for additional context. |
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #66694 +/- ##
========================================
Coverage 90.47% 90.48%
========================================
Files 791 791
Lines 277088 277205 +117
Branches 53286 53312 +26
========================================
+ Hits 250703 250822 +119
+ Misses 16805 16799 -6
- Partials 9580 9584 +4
🚀 New features to boost your workflow:
|
|
CI: https://ci.nodejs.org/job/node-test-pull-request/78352/ |
pimterry
left a comment
There was a problem hiding this comment.
Test needs a mechanical fix to get FIPS passing, but otherwise all LGTM
Signed-off-by: lazerg <lazerg2@gmail.com> Assisted-by: Claude Code
Signed-off-by: lazerg <lazerg2@gmail.com> Assisted-by: Claude Code
|
Landed in f0f8115 |
Fixes: #66681
GetCurveName()put the result ofEC_curve_nid2nist()straight into astd::string_view. That function returnsNULLfor curves with no NIST name, like brainpool, sotoLegacyObject()andgetPeerCertificate()segfault on those certificates. This started with v23.7.0.The name is now kept as a
const char*andnistCurveisundefinedwhen it isNULL. The test uses a brainpoolP256r1 certificate.