I fixed and upload source and binary on following article.
http://blog.livedoor.jp/blackwingcat/archives/1591502.html

I changed following files.(Plz search keyword 'BWC')
crypto\conf\cnf_save.c
\ssl\t1_lib.c
ssl\s3_srvr.c
ssl\s23_clnt.c
ssl\ssl_lib.c
ssl\s3_lib.c
ssl\ssl_ciph.c
ssl\ssltest.c
ssl\s3_clnt.c
ssl\kssl.c
ssl\d1_clnt.c

2012/7/30, <blackwingcat2...@gmail.com>:
> Hi,
> I use OpenSSL 1.0.0j
> Application crash on following address.
>
> source code  : s3_srvr.c Line 989
>
>               for (i=0; i<sk_SSL_CIPHER_num(ciphers); i++)
>                       {
>                       c=sk_SSL_CIPHER_value(ciphers,i);
>                       if (c->id == id)  /// <<<<<<<<<<<<<<<< not checked the 
> value "c"
> which is null pointer
>                               {
>                               j=1;
>                               break;
>                               }
>                       }
>
>
> I felt it is bug.
>
> Sincerely.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to