From: William Lallemand <wlallemand@haproxy.com>
Date: Thu, 2 Apr 2020 10:02:54 +0000 (+0200)
Subject: BUG/MINOR: ssl/cli: initialize fcount int crtlist_entry
X-Git-Tag: v2.2-dev6~44
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a690fed5bef913d245f07d21789472f1db7959d8;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl/cli: initialize fcount int crtlist_entry

Initialize fcount to 0 when 'add ssl crt-list' does not contain any
filters. This bug can lead to trying to read some filters even if they
doesn't exist.
---

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 7be6d1ccf9..bf6205fb29 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -11400,6 +11400,7 @@ static int cli_parse_add_crtlist(char **args, char *payload, struct appctx *appc
 		memprintf(&err, "Not enough memory!");
 		goto error;
 	}
+	entry->fcount = 0;
 	entry->filters = NULL;
 	entry->ssl_conf = NULL;