Avoid out-of-bounds write in SSL_get_shared_ciphers

PR: 3317

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 0103296aa9075ff5dc1b67b4ade2baa36ecc7bde..0a7e2aad2dc0e444fa86395cb9d30d4d5d4b5a53 100644 (file)
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1467,6 +1467,9 @@ char *SSL_get_shared_ciphers(const SSL *s,char *buf,int len)
                (len < 2))
                return(NULL);
 
+       if (sk_SSL_CIPHER_num(sk) == 0)
+               return NULL;
+
        p=buf;
        sk=s->session->ciphers;
        for (i=0; i<sk_SSL_CIPHER_num(sk); i++)