]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8081b67) | patch
BUG/MINOR: ssl: Missing return value check in ssl_ocsp_response_print
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Wed, 16 Feb 2022 14:17:09 +0000 (15:17 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Fri, 18 Feb 2022 08:58:04 +0000 (09:58 +0100)
commit1b01b7f2eff33ca9bd1da9fa628fd07a48c5a7cc
treee7dee7ec83a6c8b706abf4ae1629ed0807c5840ctree | snapshot
parent8081b6769902899346f4c717007841190118d349commit | diff
BUG/MINOR: ssl: Missing return value check in ssl_ocsp_response_print

When calling ssl_ocsp_response_print which is used to display an OCSP
response's details when calling the "show ssl ocsp-response" on the CLI,
we use the BIO_read function that copies an OpenSSL BIO into a trash.
The return value was not checked though, which could lead to some
crashes since BIO_read can return a negative value in case of error.

This patch should be backported to 2.5.
src/ssl_sock.c diff | blob | history
haproxy upstream