]> git.ipfire.org Git - thirdparty/openssl.git/commit
More ssl_session_dup fixes
authorMatt Caswell <matt@openssl.org>
Thu, 11 Jun 2015 00:30:06 +0000 (01:30 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 11 Jun 2015 09:18:32 +0000 (10:18 +0100)
commit39bcfb129e816de00bf2170c3497e8104767beb7
tree220e13d246b2582bc5c08fb4fd8236519e306e36
parent50d3049930575f45df11014f6c154e0ae13aa7fe
More ssl_session_dup fixes

Fix error handling in ssl_session_dup, as well as incorrect setting up of
the session ticket. Follow on from CVE-2015-1791.

Thanks to LibreSSL project for reporting these issues.

Conflicts:
ssl/ssl_sess.c

Reviewed-by: Tim Hudson <tjh@openssl.org>
ssl/ssl_sess.c