[Openvpn-commits] [OpenVPN/openvpn] f18e31: extract_x509_field_ssl(): verify that X509_NAME is...

[<ope...@li...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenVPN/openvpn
  Commit: f18e3141fae709fff47b82d7931024249ba09cc1
      https://github.com/OpenVPN/openvpn/commit/f18e3141fae709fff47b82d7931024249ba09cc1
  Author: Gert Doering <ge...@gr...>
  Date:   2025-11-27 (Thu, 27 Nov 2025)

  Changed paths:
    M src/openvpn/ssl_verify_openssl.c

  Log Message:
  -----------
  extract_x509_field_ssl(): verify that X509_NAME is not NULL.

This seems to be unlikely to ever happen, but this check won't harm
- as a matter of coding convention, we do not ensure this inside
extract_x509_field_ssl(), but in the (single) caller.

While at it, fix pre-C99 local-variable indent block, and missing {}
block in else/#endif construction.

Reported-By: Joshua Rogers <co...@jo...>
Found-by: ZeroPath (https://zeropath.com/)

Change-Id: I1e9c7eee06bf5f2e8aed8cd2523684539294ac8b
Signed-off-by: Gert Doering <ge...@gr...>
Acked-by: Antonio Quartulli <an...@ma...>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1388
Message-Id: <202...@gr...>
URL: https://www.mail-archive.com/ope...@li.../msg34748.html
Signed-off-by: Gert Doering <ge...@gr...>



To unsubscribe from these emails, change your notification settings at https://github.com/OpenVPN/openvpn/settings/notifications