From: usa@... Date: 2016-11-15T06:33:41+00:00 Subject: [ruby-core:78146] [Ruby trunk Bug#11810] [PATCH] OpenSSL::SSL::SSLcontext#{alpn, npn}_select_cb= does not work properly Issue #11810 has been updated by Usaku NAKAMURA. Backport changed from 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: UNKNOWN to 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: DONE ruby_2_2 r56798 merged revision(s) 53064. ---------------------------------------- Bug #11810: [PATCH] OpenSSL::SSL::SSLcontext#{alpn,npn}_select_cb= does not work properly https://bugs.ruby-lang.org/issues/11810#change-61508 * Author: Kazuki Yamaguchi * Status: Closed * Priority: Normal * Assignee: * ruby -v: ruby 2.3.0dev (2015-12-13 trunk 53061) [x86_64-linux] * Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: DONE ---------------------------------------- The protocol list passed to the callback function (set by `SSL_CTX_set_alpn_select_cb`, `SSL_CTX_set_next_proto_select_cb`) is not null-terminated string. This issue seems to have been existing since first NPN was supported (r36871). This patch also removes the code checking the length of protocol name, because it is already validated by OpenSSL. ---Files-------------------------------- 0001-ext-openssl-ossl_ssl.c-ssl_npn_select_cb_common-fix-.patch (1.27 KB) -- https://bugs.ruby-lang.org/ Unsubscribe: