The pandemic of incomplete OpenSSL error handling (blog.jak-linux.org) 7 points by teddyh 2mo ago ↗ HN
[–] thesuperbigfrog 2mo ago ↗ Recklessly discarding OpenSSL errors is really bad and could lead to security vulnerabilities.Calling ERR_clear_error before operations is widely recommended: https://github.com/openssl/openssl/discussions/23025which matches the blog author's point.How widespread is this OpenSSL error discarding practice? It might explain a lot of security vulnerabilities.
1 comment
[ 2.9 ms ] story [ 31.9 ms ] threadCalling ERR_clear_error before operations is widely recommended: https://github.com/openssl/openssl/discussions/23025
which matches the blog author's point.
How widespread is this OpenSSL error discarding practice? It might explain a lot of security vulnerabilities.