Hi xiaotu65217.

Are you saying that the coredump is occurring inside SSL_get_certificate() ?

Or is SSL_get_certificate() returning NULL, and is your application coredumping because it's not expecting NULL ?

If you can provide more detail on what your application is doing, that would help to diagnose this problem.

Thanks.

On 16/04/13 15:24, xiaotu65217 wrote:
Hello,my friend!
           Today when I use the openssl 0.9.8y,I met a problem,please
help me.
           The problem is : I upgrade the openssl form version 0.9.8w to
0.9.8y,a progress occured coredump.I finally found that the issue is:
           /* Fix this function so that it takes an optional type
parameter */
X509 *SSL_get_certificate(const SSL *s)
     {
* if (s->server)
         return(ssl_get_server_send_cert(s));*   //it changed here,and
add this two lines.
     else if (s->cert != NULL)
         return(s->cert->key->x509);
     else
         return(NULL);
     }
    So my question is :why you modiy this SSL_get_certificate
function?Did you modify the other codes at the same time or just this
two lines?
    If I modify this function,and roll back,do I need to rolback other
code ?

   Thank you very much!

The pciture is captured from the openssl0.9.8y,and the bugs and fixs
show like the following:





--
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to