diff options
author | Theo Buehler <tb@cvs.openbsd.org> | 2024-08-03 04:50:28 +0000 |
---|---|---|
committer | Theo Buehler <tb@cvs.openbsd.org> | 2024-08-03 04:50:28 +0000 |
commit | 8514f573f96fb4d8a8aebb22a89ad4476c163154 (patch) | |
tree | c2ae182d6ba163891cff0264c801e162584329ea /lib/librpcsvc/spray.x | |
parent | 996d03b4385f4438bb3f86dc0cb6e4535c000391 (diff) |
Prepare to provide SSL_CTX_set1_cert_store()
SSL_CTX_set_cert_store() should have been called SSL_CTX_set0_cert_store()
since it takes ownership of the store argument. Apparently a few people ran
into the issue of not bumping the refcount themselves, leading to use after
frees about 10 years ago. This is a quite rarely used API and there are no
misuses in the ports tree, but since someone did the work of writing a diff,
we can still add it.
Needless to say that SSL_CTX_get_cert_store() obviously has the exact same
issue and nobody seems to have thought of adding a get0 or get1 version to
match...
Fixes https://github.com/libressl/openbsd/issues/71
From Kenjiro Nakayama
Diffstat (limited to 'lib/librpcsvc/spray.x')
0 files changed, 0 insertions, 0 deletions