tree 10b11f828066dd812bc5d8a1cb8f63f891010060
parent ad6c2eac28ed96ec8e8c90bd5ce68794ea6bf000
author Christopher Faulet <cfaulet@haproxy.com> 1568103123 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1568104194 +0200

BUG/MINOR: ssl: always check for ssl connection before getting its XPRT context

In several SSL functions, the XPRT context is retrieved before any check on the
connection. In the function ssl_sock_is_ssl(), a test suggests the connection
may be null. So, it is safer to test the ssl connection before retrieving its
XPRT context. It removes any ambiguities and prevents possible null pointer
dereferences.

This patch fixes the issue #265. It must be backported to 2.0.