Browse Source

Addendum to the fix for bug #39178: Server crash in YaSSL

with non-RSA-requesting client if server uses RSA key

matchSuite() may not find a match. 
It will return error in this case.
Added a error checking code that will prevent using uninitialized 
memory in the code based on the assumption 
that matchSuite() has found a match.
pull/47/merge
Georgi Kodinov 17 years ago
parent
commit
51938fa015
  1. 1
      extra/yassl/src/yassl_imp.cpp

1
extra/yassl/src/yassl_imp.cpp

@ -1560,6 +1560,7 @@ void ClientHello::Process(input_buffer&, SSL& ssl)
return; return;
} }
ssl.matchSuite(cipher_suites_, suite_len_); ssl.matchSuite(cipher_suites_, suite_len_);
if (ssl.GetError()) return;
ssl.set_pending(ssl.getSecurity().get_parms().suite_[1]); ssl.set_pending(ssl.getSecurity().get_parms().suite_[1]);
if (compression_methods_ == zlib) if (compression_methods_ == zlib)

Loading…
Cancel
Save