From: Adam Bishop <adam@omega.org.uk>
Date: Mon, 26 Sep 2016 14:52:02 +0000 (+0100)
Subject: Check the CVE ID, not the name
X-Git-Tag: release_3_0_12~16^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=99d301d565b2bfc03792e33cbecef0b19ef5a4f0;p=thirdparty%2Ffreeradius-server.git

Check the CVE ID, not the name
---

diff --git a/src/main/tls.c b/src/main/tls.c
index a1d95aa1bde..d3c3810267e 100644
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -2483,7 +2483,7 @@ int tls_global_version_check(char const *acknowledged)
 			/*
 			 *	If the CVE is acknowledged, allow it.
 			 */
-			if (strcmp(acknowledged, defect->name) == 0) return 0;
+			if (strcmp(acknowledged, defect->id) == 0) return 0;
 
 			ERROR("Refusing to start with libssl version %s (in range %s)",
 			      ssl_version(), ssl_version_range(defect->low, defect->high));