]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MINOR: ssl: always clear the remains of the first hello for the second one
authorWilly Tarreau <w@1wt.eu>
Thu, 9 Oct 2025 16:47:54 +0000 (18:47 +0200)
committerWilly Tarreau <w@1wt.eu>
Thu, 9 Oct 2025 16:50:30 +0000 (18:50 +0200)
commit54f0ab08b8f1a3cb1970586e4b7ac48cf7bdf520
tree07512c9eebf56fba2057f614a14577fd8a7c6fa8
parent336170007c280ac7e8c8edc413f10cbb78af0ec5
BUG/MINOR: ssl: always clear the remains of the first hello for the second one

William rightfully pointed that despite the ssl capture being a
structure, some of its entries are only set for certain contents,
so we need to always zero it before using it so as to clear any
remains of a previous use, otherwise we could possibly report some
entries that were only present in the first hello and not the second
one. No need to clear the data though, since any remains will not be
referenced by the fields.

This must be backported wherever commit 336170007c ("BUG/MEDIUM: ssl:
take care of second client hello") is backported.
src/ssl_sock.c