On Wed, Oct 11, 2023 at 07:19:36PM +0200, Sascha Dierberg wrote: > Thanks for the reply, see https://github.com/openssl/openssl/issues/22349 > too. The reported problem is not reproducible in OpenSSL. Any memory corruption issue is highly likely to be some logic error in the application. It also seems rather likely that reading malformed (e.g., as in this case,truncated) PEM objects is not that uncommon, and any issues in the error path would have surfaced multiple times before. Occam's razor, in this case, strongly favours the calling code rather than OpenSSL. -- Viktor.
