diff options
author | Jo-Philipp Wich <jo@mein.io> | 2019-09-11 21:09:59 +0200 |
---|---|---|
committer | Jo-Philipp Wich <jo@mein.io> | 2019-11-05 14:35:17 +0100 |
commit | c9b6668215a27f2346d5eedd6f29cc720985b448 (patch) | |
tree | 9e7304250537d453cb099a7fdfde34ef8eb34bbe /ustream-io-openssl.c | |
parent | 465f8dc31d85cdd54369a5650d5daa1d3995dfaa (diff) | |
download | ustream-ssl-c9b6668215a27f2346d5eedd6f29cc720985b448.tar.gz |
ustream-ssl: skip writing pending data if .eof is true after connect
Check the .eof member of the underlying ustream after the call to
__ustream_ssl_connect() since existing users of the library appear
to set the eof flag as a way to signal connection termination upon
failing certificate verification.
This is a stop-gap measure to address TALOS-2019-0893 but a proper
API redesign is required to give applications proper control over
whether certificate failures are to be ignored or not and the default
implementation without custom callbacks should always terminate on
verification failures.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'ustream-io-openssl.c')
0 files changed, 0 insertions, 0 deletions