From: usa@...
Date: 2015-10-29T14:10:21+00:00
Subject: [ruby-core:71265] [Ruby trunk - Bug #11369] Check length of	selected NPN protocol

Issue #11369 has been updated by Usaku NAKAMURA.

Backport changed from 2.0.0: REQUIRED, 2.1: REQUIRED, 2.2: REQUIRED to 2.0.0: REQUIRED, 2.1: DONE, 2.2: REQUIRED

ruby_2_1 r52356 merged revision(s) 52227,52228.
ruby 2.1 doesn't have alpn_select_cb, so r52228 is not necessary. but I backported a part of it for keep the base of code as same with trunk as possible.

----------------------------------------
Bug #11369: Check length of selected NPN protocol
https://bugs.ruby-lang.org/issues/11369#change-54638

* Author: Jeremy Evans
* Status: Closed
* Priority: Normal
* Assignee: 
* ruby -v: ruby 2.3.0dev (2015-07-16 openbsd 51261) [x86_64-openbsd]
* Backport: 2.0.0: REQUIRED, 2.1: DONE, 2.2: REQUIRED
----------------------------------------
This fixes a failure when running on LibreSSL, where an exception
wouldn't be raised if the callback returned a selected protocol
that was too long (more than 255 bytes).  Instead, it would silently
truncate the selected protocol by casting the length from int to
unsigned char.

---Files--------------------------------
0007-Check-length-of-selected-NPN-protocol.patch (1.12 KB)


-- 
https://bugs.ruby-lang.org/