Skip to content
Commit 27232cc3 authored by Matt Caswell's avatar Matt Caswell
Browse files

Don't use OPENSSL_strdup() for copying alpn_selected



An alpn_selected value containing NUL bytes in it will result in
ext.alpn_selected_len having a larger value than the number of bytes
allocated in ext.alpn_selected.

Issue found by OSS-fuzz.

Reviewed-by: default avatarAndy Polyakov <appro@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6507)
parent 4f1b96f9
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment