Bug 16089

Summary: openssl returns success code on bad arguments
Product: Mageia Reporter: Bit Twister <bittwister2>
Component: RPM PackagesAssignee: Mageia Bug Squad <bugsquad>
Status: RESOLVED WONTFIX QA Contact:
Severity: normal    
Priority: Normal    
Version: Cauldron   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: MGA5TOO
Source RPM: openssl-1.0.2a-1.mga5 CVE:
Status comment:

Description Bit Twister 2015-06-08 12:01:19 CEST
Description of problem:

openssl returns success code on bad arguments

Also happens on mga4.

Version-Release number of selected component (if applicable):


How reproducible: ALways


Steps to Reproduce:

openssl -cert no.way xx yy
echo $?

Note return status is 0   (success)



Reproducible: 

Steps to Reproduce:
Comment 1 Samuel Verschelde 2015-06-08 12:27:34 CEST
Is this bug specific to Mageia, or an upstream bug? If the latter, please look for an existing bug open upstream, or open one, and add the link here. Also add the UPSTREAM keyword.

Summary: 5: openssl returns success code on bad arguments => openssl returns success code on bad arguments
Whiteboard: (none) => MGA5TOO

Samuel Verschelde 2015-06-08 12:27:47 CEST

Keywords: (none) => NEEDINFO

Comment 2 Bit Twister 2015-06-08 15:56:38 CEST
(In reply to Samuel VERSCHELDE from comment #1)
> Is this bug specific to Mageia, or an upstream bug? 

Going to guess upstream. :(

> If the latter, please look for an existing bug open upstream, or 
> open one,

If you were to look in file:///usr/share/doc/openssl/README a bug report requires a lot of information I do not have.

>  and add the link here. Also add the UPSTREAM keyword.

After rooting around, I finally find
   http://rt.openssl.org/NoAuth/Buglist.html
and a search for return+code get the following bug reports that indicate to me that maintainers have no great interest in fixing return code problems. 

Trimmed down snippet of my search results: 
2877 rand does not check write(2) return code new 3 years ago 
2919 Incorrect return code and printing of modulus in dsa module new 3 years ago
3092 Verify return code: 20 (unable to get local issuer certificate) 2 years ago
3787 [PATCH] Update the return value documentation for various EVP_* functions to match the code. new 2 months ago

Obviously Mageia people are not going to fix the return status problems, so I'll go ahead and mark it resolved wontfix.

Keywords: NEEDINFO => (none)
Status: NEW => RESOLVED
Resolution: (none) => WONTFIX