[openssl/openssl] 9890cc: set_client_ciphersuite(): Fix for potential UB if ...

avoget noreply at github.com
Mon Nov 13 11:58:05 UTC 2023


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 9890cc42daff5e2d0cad01ac4bf78c391f599a6e
      https://github.com/openssl/openssl/commit/9890cc42daff5e2d0cad01ac4bf78c391f599a6e
  Author: Alexey Fofanov <avoget at gmail.com>
  Date:   2023-11-13 (Mon, 13 Nov 2023)

  Changed paths:
    M ssl/statem/statem_clnt.c

  Log Message:
  -----------
  set_client_ciphersuite(): Fix for potential UB if session->cipher is NULL

This currently cannot happen without an application overriding
the session with some bogus data so this is an ossl_assert()
check.

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22418)




More information about the openssl-commits mailing list