[openssl/openssl] 6cfad0: ssl: add missing SSLfatal on session ID lock failure
"'Jakub Zelenka' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/master/[email protected]> |
Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: 6cfad0a94827754048ac9647b9ba1031ad8fcf36
https://github.com/openssl/openssl/commit/6cfad0a94827754048ac9647b9ba1031ad8fcf36
Author: Jakub Zelenka <[email protected]>
Date: 2026-08-11 (Tue, 11 Aug 2026)
Changed paths:
M ssl/ssl_sess.c
Log Message:
-----------
ssl: add missing SSLfatal on session ID lock failure
The first CRYPTO_THREAD_read_lock() failure in
ssl_generate_session_id() returned failure without calling SSLfatal()
while the second lock right below does, and callers such as
tls_construct_new_session_ticket() assume the fatal state was
already set. This should currently not happen as the read lock does
not realistically fail, so this is just future proofing of the error
handling.
Assisted-by: Claude:claude-fable-5
Reviewed-by: Matt Caswell <[email protected]>
Reviewed-by: Frederik Wedel-Heinen <[email protected]>
MergeDate: Tue Aug 11 07:31:08 2026
(Merged from https://github.com/openssl/openssl/pull/32200)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/ba627d-6cfad0%40github.com.