From: Matt Caswell <matt@openssl.org>
Date: Fri, 12 Jun 2020 09:52:41 +0000 (+0100)
Subject: Ensure that SSL_dup copies the min/max protocol version
X-Git-Tag: openssl-3.0.0-alpha4~35
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f12dd99170c1bbcd4a503fe2e615d6a3f0900d1d;p=thirdparty%2Fopenssl.git

Ensure that SSL_dup copies the min/max protocol version

With thanks to Rebekah Johnson for reporting this issue.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12180)
---

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index cee888944d2..f7544ab4020 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -4006,6 +4006,8 @@ SSL *SSL_dup(SSL *s)
         goto err;
     ret->version = s->version;
     ret->options = s->options;
+    ret->min_proto_version = s->min_proto_version;
+    ret->max_proto_version = s->max_proto_version;
     ret->mode = s->mode;
     SSL_set_max_cert_list(ret, SSL_get_max_cert_list(s));
     SSL_set_read_ahead(ret, SSL_get_read_ahead(s));