So what is the valid way to do it? Invoke it with a 1 byte array? Maybe an example should be added to the manual page?
On Thu, 6 Feb 2020 at 23:18, Marian Beermann <pub...@enkore.de> wrote: > > Is it valid to call: > > > > size_t size = SSL_get_finished(ssl, NULL, 0); > > No > > > Because SSL_get_finished invokes memcpy even if the size is 0, so is the > > undefined behaviour? > > Yes >