René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"crypto,quic: missing NULL checks for OpenSSL allocation functions","articleBody":"### Version\n\nv22.13.1\n\n### Platform\n\n```text\nA container based on Ubuntu 22.04 OS\n```\n\n### Subsystem\n\ncrypto, quic\n\n### What steps will reproduce the bug?\n\nThis is a set of latent defects found by static analysis (Svace), not\na runtime-reproducible bug. The issues are:\n\n1. src/crypto/crypto_aes.cc, function AES_Cipher (line 46):\n   EVP_CIPHER_CTX_new() result used without NULL check.\n   Cross-file statistics: checked in 37 of 40 call sites.\n\n2. src/crypto/crypto_aes.cc, function AES_CTR_Cipher2 (line 225):\n   EVP_CIPHER_CTX_new() result used without NULL check.\n   Same detector, same function.\n\n3. src/crypto/crypto_ec.cc, function ECKeyExportTraits::DoExport \n   (line 1264): EC_KEY_new() result used without NULL check.\n   Cross-file statistics: checked in 5 of 6 call sites.\n\n4. src/quic/tlscontext.cc, function TLSSession::Initialize (line 2051):\n   SSL_new() result used without NULL check.\n   Cross-file statistics: checked in 9 of 10 call sites.\n\n5. src/crypto/crypto_cipher.cc, function CipherBase::CommonInit\n   (line 2570): EVP_CIPHER_CTX_new() result wrapped in unique_ptr\n   and used without verifying it's non-null.\n\n### How often does it reproduce? Is there a required condition?\n\nWould manifest under memory pressure when OpenSSL fails to allocate\ninternal structures. Not trivially reproducible in normal operation.\n\n### What is the expected behavior? Why is that the expected behavior?\n\nAllocation failures should result in a controlled error (thrown\nJavaScript exception or appropriate error status), not a NULL pointer\ndereference / segmentation fault.\n\n### What do you see instead?\n\nPotential SIGSEGV on allocation failure.\n\n### Additional information\n\nThese findings come from the ISPRAS open-source static analysis\nworking group. All issues are of the same class (OpenSSL allocation\nfunction return value used without NULL check) and can be fixed\ntogether.","author":{"url":"https://github.com/UnLucky252","@type":"Person","name":"UnLucky252"},"datePublished":"2026-04-16T13:26:36.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":7},"url":"https://github.com/62774/node/issues/62774"}