ssl_lib: added pointer SSL_CONNECTION check to NULL before dereferencing it in ossl_c...
authoratishkov <a.tishkov@aladdin.ru>
Mon, 23 Oct 2023 10:50:44 +0000 (13:50 +0300)
committerHugo Landau <hlandau@openssl.org>
Thu, 26 Oct 2023 14:43:08 +0000 (15:43 +0100)
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22470)

ssl/ssl_lib.c

index bd9160b7561b2e9076f4e0e5fe93655a37ac5425..5314e1ec0dc7a5d29f3ed19364e647f9132bcbcd 100644 (file)
@@ -2908,6 +2908,9 @@ long ossl_ctrl_internal(SSL *s, int cmd, long larg, void *parg, int no_quic)
     long l;
     SSL_CONNECTION *sc = SSL_CONNECTION_FROM_SSL(s);
 
+    if (sc == NULL)
+        return 0;
+
     /*
      * Routing of ctrl calls for QUIC is a little counterintuitive:
      *