]> git.ipfire.org Git - thirdparty/openssl.git/commit
Correct return values for tls_construct_stoc_next_proto_neg
authorMatt Caswell <matt@openssl.org>
Fri, 21 Jun 2024 09:41:55 +0000 (10:41 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 27 Jun 2024 09:32:15 +0000 (10:32 +0100)
commit311babac7f52d75bcaa8c8b812758ca08b3bf004
tree2a53c3ff463ba391f98b7eb0e714d87edee9e4f7
parent1e2e8d082ef042f34fe4dcca60687f1d6c873a32
Correct return values for tls_construct_stoc_next_proto_neg

Return EXT_RETURN_NOT_SENT in the event that we don't send the extension,
rather than EXT_RETURN_SENT. This actually makes no difference at all to
the current control flow since this return value is ignored in this case
anyway. But lets make it correct anyway.

Follow on from CVE-2024-5535

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24716)

(cherry picked from commit e10a3a84bf73a3e6024c338b51f2fb4e78a3dee9)
ssl/statem/extensions_srvr.c