https://bz.apache.org/bugzilla/show_bug.cgi?id=65903
Bug ID: 65903
Summary: modules/ssl/ssl_engine_kernel.c: Add check for
X509_STORE_CTX_init
Product: Apache httpd-2
Version: 2.5-HEAD
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: mod_ssl
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
Created attachment 38206
--> https://bz.apache.org/bugzilla/attachment.cgi?id=38206&action=edit
0001-modules-ssl-ssl_engine_kernel-Add-check-for-X509_STORE_CTX_init.patch
As the potential failure of the X509_STORE_CTX_new() and
X509_STORE_CTX_init(), such as when lack of memory or no
lock, the 'cert_store_ctx' could be NULL and 'cert_store
could fail to initialize.
Therefore, it should be better to check X509_STORE_CTX_init()
and return error if fails, since X509_STORE_CTX_init() has
already check the 'cert_store_ctx' and return NULL if it is
NULL.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
