]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f580d0f) | patch
BUG/MEDIUM: ssl: don't free the ckch in multi-cert bundle
authorWilliam Lallemand <wlallemand@haproxy.com>
Thu, 1 Aug 2019 08:59:34 +0000 (10:59 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Thu, 1 Aug 2019 09:27:24 +0000 (11:27 +0200)
commit6dee29d63d597dfb865b67e53c04c7a9a015ba63
tree1dc4a0e1c84ddbb0d18d86c99dd08f90b0145c24tree | snapshot
parentf580d0f3918b31d2b3b3d99c99d120d46c712d2fcommit | diff
BUG/MEDIUM: ssl: don't free the ckch in multi-cert bundle

When using a ckch we should never try to free its content, because it
won't be usable  after and can result in a NULL derefence during
parsing.

The content was previously freed because the ckch wasn't stored in a
tree to be used later, now that we use it multiple time, we need to keep
the data.
src/ssl_sock.c diff | blob | history
haproxy upstream