tree 78c34d5c7168d8fe124487810d3c139f37798353
parent 7032a3fd0a71426d338190ec0eeb86f5c547c3dd
author Dragan Dosen <ddosen@haproxy.com> 1588576048 +0200
committer Willy Tarreau <w@1wt.eu> 1588593084 +0200
encoding latin1

BUG/MEDIUM: ssl: fix the id length check within smp_fetch_ssl_fc_session_id()

After we call SSL_SESSION_get_id(), the length of the id in bytes is
stored in "len", which was never checked. This could cause unexpected
behavior when using the "ssl_fc_session_id" or "ssl_bc_session_id"
fetchers (eg. the result can be an empty value).

The issue was introduced with commit 105599c ("BUG/MEDIUM: ssl: fix
several bad pointer aliases in a few sample fetch functions").

This patch must be backported to 2.1, 2.0, and 1.9.