tree 7eb6b9c9b63e87bd289620d33fc3a4644784b91a
parent be2c1068b0b9fa5bd390cf0c3c037878f2356a0a
author Christopher Faulet <cfaulet@haproxy.com> 1568103123 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1568104837 +0200

BUG/MINOR: ssl: always check for ssl connection before getting its XPRT context

In several SSL functions, the XPRT context is retrieved before any check on the
connection. In the function ssl_sock_is_ssl(), a test suggests the connection
may be null. So, it is safer to test the ssl connection before retrieving its
XPRT context. It removes any ambiguities and prevents possible null pointer
dereferences.

This patch fixes the issue #265. It must be backported to 2.0.

(cherry picked from commit 82004145d495bc3f159af06acad333fa6da4b58d)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>