[openssl/openssl] 761c9a: statem: fix missing SSLfatal in TLSv1.3 ticket con...
"'Jakub Zelenka' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/openssl-3.4/[email protected]> |
Branch: refs/heads/openssl-3.4
Home: https://github.com/openssl/openssl
Commit: 761c9a69370db0dd750bbaa513ae508b96e997d7
https://github.com/openssl/openssl/commit/761c9a69370db0dd750bbaa513ae508b96e997d7
Author: Jakub Zelenka <[email protected]>
Date: 2026-08-10 (Mon, 10 Aug 2026)
Changed paths:
M ssl/statem/statem_srvr.c
Log Message:
-----------
statem: fix missing SSLfatal in TLSv1.3 ticket construction
tls_construct_new_session_ticket() assumed ssl_session_dup() calls
SSLfatal() on failure but it never does, unlike all its other call
sites which call SSLfatal() themselves. An allocation failure there
made the construct function return CON_FUNC_ERROR without entering
the fatal state, tripping the check_fatal assertion in
write_state_machine() on debug builds.
Assisted-by: Claude:claude-fable-5
Reviewed-by: Matt Caswell <[email protected]>
Reviewed-by: Frederik Wedel-Heinen <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
MergeDate: Mon Aug 10 13:55:51 2026
(Merged from https://github.com/openssl/openssl/pull/32183)
(cherry picked from commit d271efc353856df91d28c8f54ead56b298c852f0)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.4/ad0c0a-761c9a%40github.com.