]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp()
authorWilliam Lallemand <wlallemand@haproxy.com>
Fri, 31 Jul 2020 09:43:20 +0000 (11:43 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Fri, 31 Jul 2020 09:51:20 +0000 (11:51 +0200)
commita560c06af7d9ba68cb0e82d1d25652b9a6a5a336
tree27798950f849671aeccd1c4f346fce7dee4f2b09
parent6b79f38a7a0a5e24387658478edf14c9c9394d47
BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp()

Check the return of the calloc in ssl_sock_load_ocsp() which could lead
to a NULL dereference.

This was introduced by commit be2774d ("MEDIUM: ssl: Added support for
Multi-Cert OCSP Stapling").

Could be backported as far as 1.7.
src/ssl_sock.c