romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-24 17:27:16 +03:00
Code Issues Projects Releases Packages Wiki Activity

Curl_ssl_getsessionid: fail if no session cache exists

Browse source 
This function might get called for an easy handle for which the session
cache hasn't been setup. It now just returns a "miss" in that case.

Reported-by: Christoph M. Becker
Fixes #7148
Closes #7153
This commit is contained in:
Daniel Stenberg 2021-05-31 15:29:03 +02:00
parent 5e1e4dbf1e
commit 894c74738f
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/vtls/vtls.c
View file

@ -407,8 +407,9 @@ bool Curl_ssl_getsessionid(struct Curl_easy *data,
DEBUGASSERT(SSL_SET_OPTION(primary.sessionid));
if(!SSL_SET_OPTION(primary.sessionid))
/* session ID re-use is disabled */
if(!SSL_SET_OPTION(primary.sessionid) || !data->state.session)
/* session ID re-use is disabled or the session cache has not been
setup */
return TRUE;
/* Lock if shared */