mirror of
https://github.com/apache/httpd.git
synced 2025-08-08 15:02:10 +03:00
* modules/ssl/ssl_engine_kernel.c (ssl_hook_UserCheck): Fix possible
NULL pointer dereference in some configurations. PR: 31848 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105663 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
@@ -874,7 +874,8 @@ int ssl_hook_UserCheck(request_rec *r)
|
|||||||
* - ssl not enabled
|
* - ssl not enabled
|
||||||
* - client did not present a certificate
|
* - client did not present a certificate
|
||||||
*/
|
*/
|
||||||
if (!((sc->enabled == SSL_ENABLED_TRUE || sc->enabled == SSL_ENABLED_OPTIONAL) && sslconn->ssl && sslconn->client_cert) ||
|
if (!((sc->enabled == SSL_ENABLED_TRUE || sc->enabled == SSL_ENABLED_OPTIONAL)
|
||||||
|
&& sslconn && sslconn->ssl && sslconn->client_cert) ||
|
||||||
!(dc->nOptions & SSL_OPT_FAKEBASICAUTH) || r->user)
|
!(dc->nOptions & SSL_OPT_FAKEBASICAUTH) || r->user)
|
||||||
{
|
{
|
||||||
return DECLINED;
|
return DECLINED;
|
||||||
|
Reference in New Issue
Block a user