From 15c1ac03c8d23362940ce2809925598497098eae Mon Sep 17 00:00:00 2001 From: =?utf8?q?G=C3=BCnther=20Noack?= Date: Thu, 1 May 2014 13:33:11 +0200 Subject: [PATCH] Avoid out-of-bounds write in SSL_get_shared_ciphers PR: 3317 --- ssl/ssl_lib.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c index 6dbc3c1f7d..6e2711afa6 100644 --- a/ssl/ssl_lib.c +++ b/ssl/ssl_lib.c @@ -1347,6 +1347,9 @@ char *SSL_get_shared_ciphers(const SSL *s,char *buf,int len) (len < 2)) return(NULL); + if (sk_SSL_CIPHER_num(sk) == 0) + return NULL; + p=buf; sk=s->session->ciphers; for (i=0; i