)]}'
{
  "commit": "07485b844a0689354c2c17163604860a82d281bb",
  "tree": "e9ed140bd56c5b6b29c483f549e2ac4f1f193d08",
  "parents": [
    "b084b6ebbf642f237c9f40d9b242aed90482bf20"
  ],
  "author": {
    "name": "007bsd",
    "email": "22483432+007bsd@users.noreply.github.com",
    "time": "Tue May 26 21:11:27 2026 +0300"
  },
  "committer": {
    "name": "Norbert Pocs",
    "email": "norbertp@openssl.org",
    "time": "Mon Jun 01 09:34:47 2026 +0200"
  },
  "message": "poly1305: prevent crash on final without a key\n\nEVP_MAC_init with a NULL key followed by EVP_MAC_final on a\nPoly1305 context crashed with a NULL function-pointer dispatch\nbecause poly1305_init accepted the no-key case as success, and\npoly1305_final had no guard before dispatching through the\nuninitialised Poly1305 state.\n\nAdd a key_set field to struct poly1305_data_st (matching\nOCB/CCM/GCM), set it in poly1305_setkey, and refuse init and\nfinal if no key has been installed.\n\nAdded a regression test asserting EVP_MAC_init with a NULL key\nreturns 0.\n\n##### Checklist\n- [ ] documentation is added or updated\n- [x] tests are added or updated\n\nCLA: trivial\n\nReviewed-by: Tomas Mraz \u003ctomas@openssl.foundation\u003e\nReviewed-by: Eugene Syromiatnikov \u003cesyr@openssl.org\u003e\nMergeDate: Mon Jun  1 07:35:02 2026\n(Merged from https://github.com/openssl/openssl/pull/31298)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "cfa59b2b492f51105dc7a54dc6021d6487337404",
      "old_mode": 33188,
      "old_path": "providers/implementations/macs/poly1305_prov.c",
      "new_id": "8d6f9c952e9d9d146637aa75b274d28b75060917",
      "new_mode": 33188,
      "new_path": "providers/implementations/macs/poly1305_prov.c"
    },
    {
      "type": "modify",
      "old_id": "7242166e767d8b2b65209d9f8dc59914f42b8f68",
      "old_mode": 33188,
      "old_path": "test/evp_extra_test.c",
      "new_id": "2ca066926577479bad21af29aeab051cd6e9abdc",
      "new_mode": 33188,
      "new_path": "test/evp_extra_test.c"
    }
  ]
}