tree 14618bddece54d5f4ec95943b8e254101bd4bf6b
parent 539bfaa9dd7bc25a15e4fcdbc23b63a514212d64
author William Lallemand <wlallemand@haproxy.com> 1698685696 +0100
committer Christopher Faulet <cfaulet@haproxy.com> 1702486979 +0100

BUG/MEDIUM: ssl: segfault when cipher is NULL

The patch which fixes the certificate selection uses
SSL_CIPHER_get_id() to skip the SCSV ciphers without checking if cipher
is NULL. This patch fixes the issue by skipping any NULL cipher in the
iteration.

Problem was reported in #2329.

Need to be backported where 23093c72f139eddfce68ea5580193ee131901591 was
backported. No release was made with this patch so the severity is
MEDIUM.

(cherry picked from commit e7bae7a0b620485407a34018709e9a1ad865e7a5)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 40ff02bdf849abaa85a9f30fd0382ebeca3de4d0)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit bf76cfec51a458ee400c022aef830737afc647c1)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit e37b5e8029761cbe711f6a31dba4693647b4a8ef)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>