bcollet/socat
1
0
Fork 0
mirror of https://repo.or.cz/socat.git synced 2024-12-22 23:42:34 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

The variable for the no-sni option was not initialized

Browse source
This commit is contained in:
Gerhard Rieger 2021-11-15 08:45:59 +01:00
parent abdf738d1f
commit 22a738d2d0
2 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
CHANGES
View file

@ -14,6 +14,11 @@ Corrections:
configure now checks for the variant. configure now checks for the variant.
Thanks to Robert Zybeck for reporting this issue. Thanks to Robert Zybeck for reporting this issue.
The variable for the no-sni option was not initialized and could thus
break OpenSSL certificate verification. E.g., test OPENSSL_SNI on some
platform succeeded with -g but failed with -O compiler option.
Thanks to valgrind for quickly finding the cause.
Porting: Porting:
Again porting Socat to AIX (7.1) - Fixed configure and compile issues: Again porting Socat to AIX (7.1) - Fixed configure and compile issues:
Adapted include requirements for IPv6 Adapted include requirements for IPv6

2
xio-openssl.c
View file

@ -226,7 +226,7 @@ static int
bool opt_ver = true; /* verify peer certificate */ bool opt_ver = true; /* verify peer certificate */
char *opt_cert = NULL; /* file name of client certificate */ char *opt_cert = NULL; /* file name of client certificate */
const char *opt_commonname = NULL; /* for checking peer certificate */ const char *opt_commonname = NULL; /* for checking peer certificate */
bool opt_no_sni; bool opt_no_sni = false;
const char *opt_snihost = NULL; /* for SNI host */ const char *opt_snihost = NULL; /* for SNI host */
int result; int result;