[openssl/openssl] 5419b7: statem: add missing SSLfatal in compressed certifi...

"'Jakub Zelenka' via openssl-commits" <[email protected]>
Newsgroups gmane.comp.encryption.openssl.cvs
Message-ID <openssl/openssl/push/refs/heads/openssl-4.0/[email protected]>
  Branch: refs/heads/openssl-4.0
  Home:   https://github.com/openssl/openssl
  Commit: 5419b70ba6f70f5f4a565fddfee2edad18924d51
      https://github.com/openssl/openssl/commit/5419b70ba6f70f5f4a565fddfee2edad18924d51
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M ssl/statem/statem_srvr.c

  Log Message:
  -----------
  statem: add missing SSLfatal in compressed certificate construction

A WPACKET failure in tls_construct_server_compressed_certificate()
returned CON_FUNC_ERROR without calling SSLfatal(), unlike the
identical failure handling in tls_construct_server_certificate().
This trips the check_fatal assertion in write_state_machine() on
debug builds and skips the alert and error state otherwise.

Assisted-by: Claude:claude-fable-5

Reviewed-by: Matt Caswell <[email protected]>
Reviewed-by: Frederik Wedel-Heinen <[email protected]>
MergeDate: Tue Aug 11 07:33:56 2026
(Merged from https://github.com/openssl/openssl/pull/32197)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-4.0/51b82e-5419b7%40github.com.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.