So this is from 0.9.8g's pem.h:

#define   PEM_read_SSL_SESSION(fp,x,cb,u) (SSL_SESSION *)PEM_ASN1_read( \
(char *(*)())d2i_SSL_SESSION,PEM_STRING_SSL_SESSION,fp,(char **)x,cb,u)

And so is this:

void *  PEM_ASN1_read(d2i_of_void *d2i, const char *name, FILE *fp, void **x,
pem_password_cb *cb, void *u);

Anyone notice a problem here?

That first argument to PEM_ASN1_read will never, ever be the right type.

char * != void *

So, it would appear 0.9.8g has a bug left, but it only bites you if you
call PEM_read_SSL_SESSION.

I'm wondering what the "right" fix is...  change void to char, or
vice-versa?
-- 
<URL:https://www.subspacefield.org/~travis/>
The stream is deaf, yet sings its melody for all to hear.
For a good time on my email blacklist, email [EMAIL PROTECTED]

Attachment: pgpot55o1DATQ.pgp
Description: PGP signature

Reply via email to