romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-06-02 09:34:16 +03:00
Code Issues Projects Releases Packages Wiki Activity
curl/lib/vtls
History
Joshua Rogers f21b5d4e66
gtls: fix ignored return and uninitialized status in OCSP check 
gnutls_ocsp_resp_get_single() was called with (void) discarding its
return value, so a failure (e.g. an OCSP response with no
SingleResponse entries) went undetected.  The following switch() then
read an uninitialized gnutls_ocsp_cert_status_t, which is undefined
behaviour and could yield GNUTLS_OCSP_CERT_GOOD (0) depending on
stack contents, causing gtls_verify_ocsp_status to return CURLE_OK for
a response that was never successfully parsed.

Fix by initializing status to GNUTLS_OCSP_CERT_UNKNOWN and treating a
negative return from gnutls_ocsp_resp_get_single as an error.

Closes #21679
2026-05-27 09:01:00 +02:00
..
apple.c tidy-up: use curlx_safefree() 2026-05-21 01:31:03 +02:00
apple.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
cipher_suite.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
cipher_suite.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
gtls.c gtls: fix ignored return and uninitialized status in OCSP check 2026-05-27 09:01:00 +02:00
gtls.h gtls: fix some typos 2026-05-05 08:46:26 +02:00
hostcheck.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
hostcheck.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
keylog.c rustls: fix memory leak on repeated SSLKEYLOGFILE fails 2026-04-23 22:58:39 +02:00
keylog.h vtls: log when key logging is enabled. 2026-04-23 08:13:59 +02:00
mbedtls.c tidy-up: miscellaneous 2026-05-20 00:50:43 +02:00
mbedtls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
openssl.c HTTP/3: add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC) 2026-05-27 08:49:53 +02:00
openssl.h tidy-up: miscellaneous 2026-05-20 00:50:43 +02:00
rustls.c tls: fix incomplete mTLS config in conn reuse and session cache 2026-05-20 00:02:33 +02:00
rustls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel.c schannel: error on TLS 1.3-only with cipher list 2026-05-22 11:22:15 -04:00
schannel.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel_int.h windows: update MS SDK versions in comments 2026-05-15 03:41:33 +02:00
schannel_verify.c schannel: fix revoke_best_effort setting for proxy 2026-05-20 13:51:35 -04:00
vtls.c HTTP/3: add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC) 2026-05-27 08:49:53 +02:00
vtls.h tidy-up: miscellaneous 2026-05-20 00:50:43 +02:00
vtls_int.h HTTP/3: add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC) 2026-05-27 08:49:53 +02:00
vtls_scache.c tls: fix incomplete mTLS config in conn reuse and session cache 2026-05-20 00:02:33 +02:00
vtls_scache.h tidy-up: miscellaneous 2026-05-20 00:50:43 +02:00
vtls_spack.c tidy-up: rename more CURLcode variables to result 2026-05-19 16:55:45 +02:00
vtls_spack.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
wolfssl.c tidy-up: miscellaneous 2026-05-20 00:50:43 +02:00
wolfssl.h wolfssl: fix -Wmissing-prototypes 2026-04-21 10:09:58 +02:00
x509asn1.c x509asn1: fix DH public key parameter extraction 2026-05-16 01:06:56 +02:00
x509asn1.h x509asn1: fixed and adapted for ASN1tostr unit testing 2026-03-20 13:03:40 +01:00