Kazuki Yamaguchi 9fc86fc5f9 [ruby/openssl] cipher: fix use-after-free in in-place Cipher#update ...

Take RSTRING_PTR() of the input buffer after resizing the output
buffer, as the input and output buffers may be the same String object.

Also explicitly reject in-place Cipher#update when the input is too
large to process in a single EVP_CipherUpdate() call. We should not
implicitly split the input across multiple calls for in-place
operation because this appears to be unreliable.

Reported by TheSecguy <thesecguy45@gmail.com>.

https://github.com/ruby/openssl/commit/8df76d73ba

2026-11-07 15:18:19 +00:00

..

fixtures/pkey

…

test_asn1.rb

[ruby/openssl] Fix ASN.1 OID conversion at buffer boundary

2026-11-06 19:40:56 +00:00

test_bn.rb

…

test_buffering.rb

[ruby/openssl] ssl: avoid subclassing String

2026-10-13 16:29:28 +00:00

test_cipher.rb

[ruby/openssl] cipher: fix use-after-free in in-place Cipher#update

2026-11-07 15:18:19 +00:00

test_config.rb

…

test_digest.rb

…

test_engine.rb

…

test_fips.rb

…

test_hmac.rb

[ruby/openssl] hmac: allocate OpenSSL objects in #initialize{,_copy}

2026-10-29 16:59:43 +00:00

test_hpke.rb

…

test_kdf.rb

…

test_ns_spki.rb

…

test_ocsp.rb

…

test_ossl.rb

…

test_pair.rb

[ruby/openssl] ssl: raise ArgumentError for a negative length in SSLSocket

2026-10-16 17:31:04 +00:00

test_pkcs7.rb

…

test_pkcs12.rb

…

test_pkey_dh.rb

…

test_pkey_dsa.rb

…

test_pkey_ec.rb

…

test_pkey_rsa.rb

…

test_pkey.rb

…

test_provider.rb

…

test_random.rb

…

test_ssl_server.rb

…

test_ssl_session.rb

…

test_ssl.rb

[ruby/openssl] test_ssl.rb: Refactor test_pqc_sigalg

2026-10-29 16:58:00 +00:00

test_ts.rb

…

test_x509attr.rb

…

test_x509cert.rb

…

test_x509crl.rb

…

test_x509ext.rb

…

test_x509name.rb

…

test_x509req.rb

…

test_x509store.rb

…

ut_eof.rb

…

utils.rb

…