CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2022/07/20 08:08:49
Modified files:
lib/libssl : ssl_lib.c
Log message:
Validate protocols in SSL{_CTX,}_set_alpn_protos()
This wonderful API requires users to pass the protocol list in wire
format. This list is then sent as part of the ClientHello. Validate
it to be of the correct form. This reuses tlsext_alpn_check_format()
that was split out of tlsext_alpn_server_parse().
Similar checks were introduced in OpenSSL 86a90dc7
ok jsing
