ruby-core@ruby-lang.org archive (unofficial mirror)
 help / color / mirror / Atom feed
* [ruby-core:72345] [Ruby trunk - Bug #11810] [Open] [PATCH] OpenSSL::SSL::SSLcontext#{alpn, npn}_select_cb= does not work properly
@ 2015-12-18  4:13 Joseph Jones
  0 siblings, 0 replies; only message in thread
From: Joseph Jones @ 2015-12-18  4:13 UTC (permalink / raw)
  To: Ruby developers; +Cc: ruby-core

[-- Attachment #1: Type: text/plain, Size: 1038 bytes --]

Joseph Jones liked your message with Boxer. On December 12, 2015 at 10:34:39 MST, k@rhe.jp wrote:Issue #11810 has been reported by Kazuki Yamaguchi.----------------------------------------Bug #11810: [PATCH] OpenSSL::SSL::SSLcontext#{alpn,npn}_select_cb= does not work properlyhttps://bugs.ruby-lang.org/issues/11810* Author: Kazuki Yamaguchi* Status: Open* Priority: Normal* Assignee: * ruby -v: ruby 2.3.0dev (2015-12-13 trunk 53061) [x86_64-linux]* Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: UNKNOWN----------------------------------------The protocol list passed to the callback function (set by `SSL_CTX_set_alpn_select_cb`, `SSL_CTX_set_next_proto_select_cb`) is not null-terminated string.This issue seems to have been existing since first NPN was supported (r36871).This patch also removes the code checking the length of protocol name, because it is already validated by OpenSSL.---Files--------------------------------0001-ext-openssl-ossl_ssl.c-ssl_npn_select_cb_common-fix-.patch (1.27 KB)-- https://bugs.ruby-lang.org/     

[-- Attachment #2: Type: text/html, Size: 1419 bytes --]

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2015-12-18  3:43 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2015-12-18  4:13 [ruby-core:72345] [Ruby trunk - Bug #11810] [Open] [PATCH] OpenSSL::SSL::SSLcontext#{alpn, npn}_select_cb= does not work properly Joseph Jones

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).