Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 00:28:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Change handling of atypical OpenSSL error case in x509 verification.

Browse source
This commit is contained in:
Jon Siwek 2014-05-07 10:45:00 -05:00
parent 6277be6e60
commit 4ea8a4e8ef
1 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
src/file_analysis/analyzer/x509/functions.bif
View file

@ -215,9 +215,17 @@ function x509_verify%(certs: x509_opaque_vector, root_certs: table_string_of_str
X509* currcert = sk_X509_value(chain, i); X509* currcert = sk_X509_value(chain, i);
if ( currcert ) if ( currcert )
chainVector->Assign(i, new file_analysis::X509Val(currcert)); // X509Val takes ownership // X509Val takes ownership of currcert.
chainVector->Assign(i, new file_analysis::X509Val(currcert));
else else
{
reporter->InternalWarning("OpenSSL returned null certificate"); reporter->InternalWarning("OpenSSL returned null certificate");
for ( int j = i + 1; i < num_certs; ++j )
X509_free(sk_X509_value(chain, j));
break;
}
} }
sk_X509_free(chain); sk_X509_free(chain);