Avoid out-of-bounds write in SSL_get_shared_ciphers

PR: 3317

Avoid out-of-bounds write in SSL_get_shared_ciphers
PR: 3317
308505b8 · Günther Noack · Matt Caswell · b00676bb · 308505b8
显示空白变更内容
内联并排

Showing with 3 addition and 0 deletion

ssl/ssl_lib.c ssl/ssl_lib.c +3 -0

未找到文件。
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1457,6 +1457,9 @@ char *SSL_get_shared_ciphers(const SSL *s,char *buf,int len)
 		(len < 2))
 		return(NULL);
+	if (sk_SSL_CIPHER_num(sk) == 0)
+		return NULL;
 	p=buf;
 	sk=s->session->ciphers;
 	for (i=0; i<sk_SSL_CIPHER_num(sk); i++)