moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-08-13 17:03:50 -04:00
Code Issues Releases Wiki Activity
42a4cd4c78
curl/lib/vtls
History
Kamil Dudka 42a4cd4c78 nss: fix a possible use-after-free in SelectClientCert() 
... causing a SIGSEGV in showit() in case the handle used to initiate
the connection has already been freed.

This commit fixes a bug introduced in curl-7_19_5-204-g5f0cae803.

Reported-by: Rob Sanders
Bug: https://bugzilla.redhat.com/1436158
2017-07-20 08:09:01 +02:00
..
axtls.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
axtls.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
cyassl.c cyassl: define build macros before including ssl.h 2017-06-03 00:39:46 +02:00
cyassl.h cyassl: fix typo 2017-02-21 22:24:39 -05:00
darwinssl.c darwinssl: fix pinnedpubkey build error 2017-07-17 02:46:07 -04:00
darwinssl.h SecureTransport/DarwinSSL: Implement public key pinning 2017-05-15 22:54:33 +02:00
gskit.c spelling fixes 2017-03-26 23:56:23 +02:00
gskit.h curl_version_info: add CURL_VERSION_HTTPS_PROXY 2016-11-26 17:28:53 +01:00
gtls.c gtls: fix build when sizeof(long) < sizeof(void *) 2017-07-03 15:45:25 +02:00
gtls.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
mbedtls.c mbedtls: make TU-local variable static 2017-06-02 22:05:01 +02:00
mbedtls.h mbedtls: add support for CURLOPT_SSL_CTX_FUNCTION 2017-03-21 23:51:44 -04:00
nss.c nss: fix a possible use-after-free in SelectClientCert() 2017-07-20 08:09:01 +02:00
nssg.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
openssl.c openssl: improve fallback seed of PRNG with a time based hash 2017-06-30 09:21:03 +02:00
openssl.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
polarssl_threadlock.c Curl_polarsslthreadlock_thread_setup: clear array at init 2016-10-18 13:05:43 +02:00
polarssl_threadlock.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
polarssl.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
polarssl.h polarssl: fix hangs 2017-01-28 19:47:08 +01:00
schannel.c schannel: return a more specific error code for SEC_E_UNTRUSTED_ROOT 2017-05-04 18:19:33 +02:00
schannel.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
vtls.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
vtls.h checksrc: code style: use 'char *name' style 2016-11-24 23:58:22 +01:00