From: Pauli <ppzgs1@gmail.com>
Date: Tue, 23 Mar 2021 00:33:15 +0000 (+1000)
Subject: x509: fix coverity 1461225: data race condition
X-Git-Tag: openssl-3.0.0-alpha14~143
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=96a68f21c305d33f89e1e0bc9c45b6afb0de7654;p=thirdparty%2Fopenssl.git

x509: fix coverity 1461225: data race condition

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14651)
---

diff --git a/crypto/x509/v3_purp.c b/crypto/x509/v3_purp.c
index b98fc584ff0..5b13fd7445d 100644
--- a/crypto/x509/v3_purp.c
+++ b/crypto/x509/v3_purp.c
@@ -681,7 +681,10 @@ static int check_ca(const X509 *x)
 
 void X509_set_proxy_flag(X509 *x)
 {
-    x->ex_flags |= EXFLAG_PROXY;
+    if (CRYPTO_THREAD_write_lock(x->lock)) {
+        x->ex_flags |= EXFLAG_PROXY;
+        CRYPTO_THREAD_unlock(x->lock);
+    }
 }
 
 void X509_set_proxy_pathlen(X509 *x, long l)