bugzilla at apache
Aug 5, 2013, 3:12 AM
Post #1 of 1
(17 views)
Permalink
|
|
[Bug 55356] New: Long protocol names are not skipped when building advertisement string for TLS Next Protocol Negotiation (NPN)
|
|
https://issues.apache.org/bugzilla/show_bug.cgi?id=55356
Bug ID: 55356
Summary: Long protocol names are not skipped when building
advertisement string for TLS Next Protocol Negotiation
(NPN)
Product: Apache httpd-2
Version: 2.2-HEAD
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_ssl
Assignee: bugs [at] httpd
Reporter: agraf [at] ghostwheel
Created attachment 30675
--> https://issues.apache.org/bugzilla/attachment.cgi?id=30675&action=edit
Fix NPN advertisement string generation. Remove mod_ssl.h includes.
Discovered this whilst porting #52210 to apache 2.4
In ssl_engine_kernel.c (ssl_callback_AdvertiseNextProtos) long protocol names
(length>255) are not skipped when copied to the sequence of length-prefixed
strings - only a warning is issued.
Also "mod_ssl.h" doesn't need to be included in ssl_engine_io.c and
ssl_engine_kernel.c.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd
|
