]> git.ipfire.org Git - thirdparty/openssl.git/commit
Handle set_alpn_protos inputs better.
authorTodd Short <tshort@akamai.com>
Mon, 22 Mar 2021 16:56:36 +0000 (12:56 -0400)
committerTomas Mraz <tomas@openssl.org>
Tue, 13 Apr 2021 10:29:37 +0000 (12:29 +0200)
commitfeba11cf2ea1dee9cc6e30bf5953404c9c2c88c6
tree48bee7ecfe5b83d7ea2cd24747f6c817ccd877bf
parent3ab736acb89c277bd174f958591c65c66d611c72
Handle set_alpn_protos inputs better.

It's possible to set an invalid protocol list that will be sent in a
ClientHello. This validates the inputs to make sure this does not
happen.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14815)
ssl/ssl_lib.c
test/clienthellotest.c
test/sslapitest.c