Mercurial > hg > nginx
changeset 7365:cd4fa2fab8d8
SSL: fixed unlocked access to sess_id->len.
author | Ruslan Ermilov <ru@nginx.com> |
---|---|
date | Tue, 25 Sep 2018 14:07:59 +0300 |
parents | 5fa22beeaf11 |
children | 7bf3c323cb6e |
files | src/event/ngx_event_openssl.c |
diffstat | 1 files changed, 5 insertions(+), 2 deletions(-) [+] |
line wrap: on
line diff
--- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c @@ -3146,6 +3146,7 @@ ngx_ssl_get_cached_session(ngx_ssl_conn_ const #endif u_char *p; + size_t slen; uint32_t hash; ngx_int_t rc; ngx_shm_zone_t *shm_zone; @@ -3201,12 +3202,14 @@ ngx_ssl_get_cached_session(ngx_ssl_conn_ if (rc == 0) { if (sess_id->expire > ngx_time()) { - ngx_memcpy(buf, sess_id->session, sess_id->len); + slen = sess_id->len; + + ngx_memcpy(buf, sess_id->session, slen); ngx_shmtx_unlock(&shpool->mutex); p = buf; - sess = d2i_SSL_SESSION(NULL, &p, sess_id->len); + sess = d2i_SSL_SESSION(NULL, &p, slen); return sess; }