Mercurial > hg > nginx
view contrib/README @ 7667:1ece2ac2555a
OCSP: fixed use-after-free on error.
When validating second and further certificates, ssl callback could be called
twice to report the error. After the first call client connection is
terminated and its memory is released. Prior to the second call and in it
released connection memory is accessed.
Errors triggering this behavior:
- failure to create the request
- failure to start resolving OCSP responder name
- failure to start connecting to the OCSP responder
The fix is to rearrange the code to eliminate the second call.
| author | Roman Arutyunyan <arut@nginx.com> |
|---|---|
| date | Mon, 15 Jun 2020 20:17:16 +0300 |
| parents | 1bdf906bba99 |
| children |
line wrap: on
line source
geo2nginx.pl by Andrei Nigmatulin The perl script to convert CSV geoip database ( free download at http://www.maxmind.com/app/geoip_country ) to format, suitable for use by the ngx_http_geo_module. unicode2nginx by Maxim Dounin The perl script to convert unicode mappings ( available at http://www.unicode.org/Public/MAPPINGS/ ) to the nginx configuration file format. Two generated full maps for windows-1251 and koi8-r. vim by Evan Miller Syntax highlighting of nginx configuration for vim, to be placed into ~/.vim/.