You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2022/02/21 08:41:59 UTC
[Bug 65905] New: modules/ssl/ssl_engine_init.c: Add check for X509_STORE_CTX_init
https://bz.apache.org/bugzilla/show_bug.cgi?id=65905
Bug ID: 65905
Summary: modules/ssl/ssl_engine_init.c: Add check for
X509_STORE_CTX_init
Product: Apache httpd-2
Version: 2.5-HEAD
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: mod_ssl
Assignee: bugs@httpd.apache.org
Reporter: jiasheng@iscas.ac.cn
Target Milestone: ---
Created attachment 38208
--> https://bz.apache.org/bugzilla/attachment.cgi?id=38208&action=edit
0001-modules-ssl-ssl_engine_init-Add-check-for-X509_STORE_CTX_init.patch
As the potential failure of the X509_STORE_CTX_init(),
for example there is no lock, the 'sctx' could fail to
initialize.
Therefore, it should be better to check X509_STORE_CTX_init()
and return error if fails.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65905] modules/ssl/ssl_engine_init.c: Add check for X509_STORE_CTX_init
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65905
--- Comment #1 from Giovanni Bechis <gi...@paclan.it> ---
Created attachment 38212
--> https://bz.apache.org/bugzilla/attachment.cgi?id=38212&action=edit
Free sctx and sk
I think also sk should be freed in this case.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65905] modules/ssl/ssl_engine_init.c: Add check for X509_STORE_CTX_init
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65905
Jiasheng Jiang <ji...@iscas.ac.cn> changed:
What |Removed |Added
----------------------------------------------------------------------------
OS| |All
--- Comment #2 from Jiasheng Jiang <ji...@iscas.ac.cn> ---
OK, that's right.
Need I submit a new patch, or directly using your 'attachment 38212'?
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65905] modules/ssl/ssl_engine_init.c: Add check for X509_STORE_CTX_init
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65905
--- Comment #3 from Giovanni Bechis <gi...@paclan.it> ---
Committed in r1898410.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org