mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-11-29 14:50:59 +01:00
Code Issues Projects Releases Wiki Activity

BUG/MINOR: ssl/ocsp: check chunk_strcpy() in ssl_ocsp_get_uri_from_cert()

Browse Source 
Check the return value of chunk_strcpy() in
ssl_ocsp_get_uri_from_cert().

Should fix issue #1975.
This commit is contained in:
William Lallemand 2022-12-22 10:09:11 +01:00
parent c8d814ed63
commit 8bc00f8bdc
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/ssl_ocsp.c
View File

@ -590,7 +590,10 @@ int ssl_ocsp_get_uri_from_cert(X509 *cert, struct buffer *out, char **err)
goto end; goto end;
} }
chunk_strcpy(out, sk_OPENSSL_STRING_value(ocsp_uri_stk, 0)); if (!chunk_strcpy(out, sk_OPENSSL_STRING_value(ocsp_uri_stk, 0))) {
memprintf(err, "%sOCSP URI too long!\n", *err ? *err : "");
goto end;
}
if (b_data(out) == 0) { if (b_data(out) == 0) {
memprintf(err, "%sNo OCSP URL!\n", *err ? *err : ""); memprintf(err, "%sNo OCSP URL!\n", *err ? *err : "");
goto end; goto end;