tree d6e84bf5e5564de9ba6fe549d93254b00aa02804
parent 9972128fbb78d891d474b1d693e9a1235cad6d3d
author William Lallemand <wlallemand@haproxy.com> 1596188600 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1599812031 +0200

BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp()

Check the return of the calloc in ssl_sock_load_ocsp() which could lead
to a NULL dereference.

This was introduced by commit be2774d ("MEDIUM: ssl: Added support for
Multi-Cert OCSP Stapling").

Could be backported as far as 1.7.

(cherry picked from commit a560c06af7d9ba68cb0e82d1d25652b9a6a5a336)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit ea22337f040fd563b5bd5457976d90568a0b4697)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit fa5d70bc54b8f32649713ea7f9f8730de809278d)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>