Package: 1138428 Followup-For: Bug #1138428 X-Debbugs-Cc: [email protected]
This patch fixes the build failure with OpenSSL 4.0. -- System Information: Debian Release: trixie/sid APT prefers noble-updates APT policy: (500, 'noble-updates'), (500, 'noble-security'), (500, 'noble'), (100, 'noble-backports') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.8.0-117-generic (SMP w/12 CPU threads; PREEMPT) Kernel taint flags: TAINT_WARN Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled
>From c5602daad14bf3c1f51bfaf7fbfcf684b8f45034 Mon Sep 17 00:00:00 2001 From: Hofi <[email protected]> Date: Mon, 4 May 2026 10:40:57 +0200 Subject: [PATCH] tls-verifier: use dedicated ASN1_STRING field accessors instead of direct member access Signed-off-by: Hofi <[email protected]> Origin: upstream, https://github.com/syslog-ng/syslog-ng/commit/1803ccca95334409eacb4187b4f39a2acb3a70f1 Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/syslog-ng/+bug/2154973 Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138428 --- a/lib/transport/tls-verifier.c +++ b/lib/transport/tls-verifier.c @@ -157,10 +157,10 @@ { gchar dotted_ip[64] = {0}; int addr_family = AF_INET; - if (gen_name->d.iPAddress->length == 16) + if (ASN1_STRING_length(gen_name->d.iPAddress) == 16) addr_family = AF_INET6; - if (inet_ntop(addr_family, gen_name->d.iPAddress->data, dotted_ip, sizeof(dotted_ip))) + if (inet_ntop(addr_family, ASN1_STRING_get0_data(gen_name->d.iPAddress), dotted_ip, sizeof(dotted_ip))) { g_strlcpy(pattern_buf, dotted_ip, sizeof(pattern_buf)); found = TRUE;

