[ruby-core:78146] [Ruby trunk Bug#11810] [PATCH] OpenSSL::SSL::SSLcontext#{alpn, npn}_select_cb= does not work properly
From:
usa@...
Date:
2016-11-15 06:33:41 UTC
List:
ruby-core #78146
Issue #11810 has been updated by Usaku NAKAMURA.
Backport changed from 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: UNKNOWN to 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: DONE
ruby_2_2 r56798 merged revision(s) 53064.
----------------------------------------
Bug #11810: [PATCH] OpenSSL::SSL::SSLcontext#{alpn,npn}_select_cb= does not work properly
https://bugs.ruby-lang.org/issues/11810#change-61508
* Author: Kazuki Yamaguchi
* Status: Closed
* Priority: Normal
* Assignee:
* ruby -v: ruby 2.3.0dev (2015-12-13 trunk 53061) [x86_64-linux]
* Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: DONE
----------------------------------------
The protocol list passed to the callback function (set by `SSL_CTX_set_alpn_select_cb`, `SSL_CTX_set_next_proto_select_cb`) is not null-terminated string.
This issue seems to have been existing since first NPN was supported (r36871).
This patch also removes the code checking the length of protocol name, because it is already validated by OpenSSL.
---Files--------------------------------
0001-ext-openssl-ossl_ssl.c-ssl_npn_select_cb_common-fix-.patch (1.27 KB)
--
https://bugs.ruby-lang.org/
Unsubscribe: <mailto:[email protected]?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>