checksum-utils: Add an assertion that `buf != NULL`
authorColin Walters <walters@verbum.org>
Wed, 26 Jul 2023 22:05:36 +0000 (18:05 -0400)
committerColin Walters <walters@verbum.org>
Wed, 26 Jul 2023 22:09:28 +0000 (18:09 -0400)
Another hardening against https://bugzilla.redhat.com/show_bug.cgi?id=2217401

src/libotutil/ot-checksum-utils.c

index 8f585c0992875f7cb09811e148f5a2ca7f03720b..2fe7277322aa227f02ede897edd9a628d216d7ed 100644 (file)
@@ -93,6 +93,7 @@ void
 ot_checksum_update (OtChecksum *checksum, const guint8 *buf, size_t len)
 {
   OtRealChecksum *real = (OtRealChecksum *)checksum;
+  g_assert (buf);
   g_return_if_fail (real->initialized);
   g_return_if_fail (!real->closed);
 #if defined(HAVE_OPENSSL)
@@ -108,6 +109,7 @@ static void
 ot_checksum_get_digest_internal (OtRealChecksum *real, guint8 *buf, size_t buflen)
 {
   g_return_if_fail (real->initialized);
+  g_assert (buf);
   g_assert_cmpint (buflen, ==, _OSTREE_SHA256_DIGEST_LEN);
 #if defined(HAVE_OPENSSL)
   guint digest_len = buflen;