projects / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c5f2b53) | patch
SSL_check_chain fix
authorMatt Caswell <matt@openssl.org>
Wed, 11 Mar 2015 17:01:38 +0000 (17:01 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 12 Mar 2015 09:25:32 +0000 (09:25 +0000)
commitd813f9eb383a93e472e69750cd1edbb170205ad2
tree0e848e1cbefaee6d16912d1326058391d618e9e2tree | snapshot
parentc5f2b5336ab72e40ab91e2ca85639f51fa3178c6commit | diff
SSL_check_chain fix

If SSL_check_chain is called with a NULL X509 object or a NULL EVP_PKEY
or the type of the public key is unrecognised then the local variable
|cpk| in tls1_check_chain does not get initialised. Subsequently an
attempt is made to deref it (after the "end" label), and a seg fault will
result.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
ssl/t1_lib.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.