diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2017-08-22 17:36:12 +0300 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2017-08-22 17:36:12 +0300 |
| commit | ed0cc4d52308b75ab217724392994e6828af4fda (patch) | |
| tree | 72a91d2bcff58902adcfb7ab344225ec33d6bef5 /src/core/nginx.h | |
| parent | 50a0f25c60bcc0fb46efcab00985c200c08c2b2f (diff) | |
| download | nginx-ed0cc4d52308b75ab217724392994e6828af4fda.tar.gz nginx-ed0cc4d52308b75ab217724392994e6828af4fda.zip | |
SSL: fixed possible use-after-free in $ssl_server_name.
The $ssl_server_name variable used SSL_get_servername() result directly,
but this is not safe: it references a memory allocation in an SSL
session, and this memory might be freed at any time due to renegotiation.
Instead, copy the name to memory allocated from the pool.
Diffstat (limited to 'src/core/nginx.h')
0 files changed, 0 insertions, 0 deletions