From: k@...
Date: 2015-12-12T17:34:39+00:00
Subject: [ruby-core:72082] [Ruby trunk - Bug #11810] [Open] [PATCH] OpenSSL::SSL::SSLcontext#{alpn, npn}_select_cb= does not work properly

Issue #11810 has been reported by Kazuki Yamaguchi.

----------------------------------------
Bug #11810: [PATCH] OpenSSL::SSL::SSLcontext#{alpn,npn}_select_cb= does not work properly
https://bugs.ruby-lang.org/issues/11810

* Author: Kazuki Yamaguchi
* Status: Open
* Priority: Normal
* Assignee: 
* ruby -v: ruby 2.3.0dev (2015-12-13 trunk 53061) [x86_64-linux]
* Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: UNKNOWN
----------------------------------------
The protocol list passed to the callback function (set by `SSL_CTX_set_alpn_select_cb`, `SSL_CTX_set_next_proto_select_cb`) is not null-terminated string.
This issue seems to have been existing since first NPN was supported (r36871).

This patch also removes the code checking the length of protocol name, because it is already validated by OpenSSL.

---Files--------------------------------
0001-ext-openssl-ossl_ssl.c-ssl_npn_select_cb_common-fix-.patch (1.27 KB)


-- 
https://bugs.ruby-lang.org/