[curl/curl] a63dae: sectransp: fix EXC_BAD_ACCESS caused by uninitiali...

ebejan <[email protected]> Tue, 25 May 2021 02:25:18 -0700

Newsgroups	gmane.comp.web.curl.cvs
Message-ID	<curl/curl/push/refs/heads/master/[email protected]>

  Branch: refs/heads/master
  Home:   https://github.com/curl/curl
  Commit: a63dae5d078b24dc441e421a37fa7daf09fc4768
      https://github.com/curl/curl/commit/a63dae5d078b24dc441e421a37fa7daf09fc4768
  Author: ejanchivdorj <[email protected]>
  Date:   2021-05-25 (Tue, 25 May 2021)

  Changed paths:
    M lib/vtls/sectransp.c

  Log Message:
  -----------
  sectransp: fix EXC_BAD_ACCESS caused by uninitialized buffer

When the SecCertificateCopyCommonName function fails, it leaves
common_name in a invalid state so CFStringCompare uses the invalid
result, causing EXC_BAD_ACCESS.

The fix is to check the return value of the function before using the
name.

Closes #7126


_______________________________________________
curl-commits mailing list
[email protected]
https://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits