projects / oweals / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cb9f1bc) | patch
More ssl_session_dup fixes
authorMatt Caswell <matt@openssl.org>
Thu, 11 Jun 2015 00:30:06 +0000 (01:30 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 11 Jun 2015 09:13:02 +0000 (10:13 +0100)
commitdb96b5ab761fb97633dde9aec62c0032743e88f8
treea8cfb0694d19bef33defa2c9b1a708c89fff89c7tree | snapshot
parentcb9f1bc1d118bfe17d7c3004bbf33746df1855bdcommit | diff
More ssl_session_dup fixes

Fix error handling in ssl_session_dup, as well as incorrect setting up of
the session ticket. Follow on from CVE-2015-1791.

Thanks to LibreSSL project for reporting these issues.

Conflicts:
ssl/ssl_sess.c

Reviewed-by: Tim Hudson <tjh@openssl.org>
ssl/ssl_sess.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.