]> git.ipfire.org Git - thirdparty/openssl.git/commit
Correct return values for tls_construct_stoc_next_proto_neg
authorMatt Caswell <matt@openssl.org>
Fri, 21 Jun 2024 09:41:55 +0000 (10:41 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 27 Jun 2024 09:30:51 +0000 (10:30 +0100)
commite10a3a84bf73a3e6024c338b51f2fb4e78a3dee9
treeae61d51482b04e62afb39ad01f7a5098cb3b4ddd
parent9925c97a8e8c9887765a0979c35b516bc8c3af85
Correct return values for tls_construct_stoc_next_proto_neg

Return EXT_RETURN_NOT_SENT in the event that we don't send the extension,
rather than EXT_RETURN_SENT. This actually makes no difference at all to
the current control flow since this return value is ignored in this case
anyway. But lets make it correct anyway.

Follow on from CVE-2024-5535

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24716)
ssl/statem/extensions_srvr.c