Re: [openssl.org #3317] Patch: Avoid out-of-bounds write in SSL_get_shared_ciphers

2014-05-12 Thread Günther Noack via RT
Nice, thanks. :) 2014-05-12 1:09 GMT+02:00 Matt Caswell via RT : > Patch applied in commit 308505b838e4e3ce8485bb30f5b26e2766dc7f8b. Similar > commits in the 1.0.2, 1.0.1, 1.0.0 and 0.9.8 branches. > > Many thanks for your contribution. > > Matt > > _

[openssl.org #3317] Patch: Avoid out-of-bounds write in SSL_get_shared_ciphers

2014-04-16 Thread Günther Noack via RT
Hello, the attached patch fixes an out-of-bounds write in SSL_get_shared_ciphers. According to Bodo Moeller, the bug should not be critical because the function never gets called with an empty list, but it may still be nice to have that check in place. Without the patch, when SSL_get_shared_ciph