Kazuki Yamaguchi 9fc86fc5f9 [ruby/openssl] cipher: fix use-after-free in in-place Cipher#update
Take RSTRING_PTR() of the input buffer after resizing the output
buffer, as the input and output buffers may be the same String object.

Also explicitly reject in-place Cipher#update when the input is too
large to process in a single EVP_CipherUpdate() call. We should not
implicitly split the input across multiple calls for in-place
operation because this appears to be unreliable.

Reported by TheSecguy <thesecguy45@gmail.com>.

https://github.com/ruby/openssl/commit/8df76d73ba
2026-11-07 15:18:19 +00:00
..
2026-11-05 16:47:43 +09:00
2026-10-07 06:11:37 +09:00
…
…
…