mirror of
https://github.com/nginx/nginx.git
synced 2025-08-05 22:26:15 +08:00
Added check for SSL_get_current_cipher() results.
The function may return NULL and result need to be checked before use.
This commit is contained in:
parent
61aa190cfb
commit
757b3e7bcf
@ -62,13 +62,19 @@ static ngx_int_t
|
||||
ngx_quic_ciphers(ngx_ssl_conn_t *ssl_conn, ngx_quic_ciphers_t *ciphers,
|
||||
enum ssl_encryption_level_t level)
|
||||
{
|
||||
ngx_int_t id, len;
|
||||
ngx_int_t id, len;
|
||||
const SSL_CIPHER *cipher;
|
||||
|
||||
if (level == ssl_encryption_initial) {
|
||||
id = NGX_AES_128_GCM_SHA256;
|
||||
|
||||
} else {
|
||||
id = SSL_CIPHER_get_id(SSL_get_current_cipher(ssl_conn)) & 0xffff;
|
||||
cipher = SSL_get_current_cipher(ssl_conn);
|
||||
if (cipher == NULL) {
|
||||
return NGX_ERROR;
|
||||
}
|
||||
|
||||
id = SSL_CIPHER_get_id(cipher) & 0xffff;
|
||||
}
|
||||
|
||||
switch (id) {
|
||||
|
Loading…
Reference in New Issue
Block a user