mirror of
https://github.com/apache/httpd.git
synced 2025-08-08 15:02:10 +03:00
* modules/ssl/ssl_engine_kernel.c (ssl_hook_UserCheck): Fix possible
NULL pointer dereference in some configurations. PR: 31848 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105663 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
@@ -874,7 +874,8 @@ int ssl_hook_UserCheck(request_rec *r)
|
||||
* - ssl not enabled
|
||||
* - client did not present a certificate
|
||||
*/
|
||||
if (!((sc->enabled == SSL_ENABLED_TRUE || sc->enabled == SSL_ENABLED_OPTIONAL) && sslconn->ssl && sslconn->client_cert) ||
|
||||
if (!((sc->enabled == SSL_ENABLED_TRUE || sc->enabled == SSL_ENABLED_OPTIONAL)
|
||||
&& sslconn && sslconn->ssl && sslconn->client_cert) ||
|
||||
!(dc->nOptions & SSL_OPT_FAKEBASICAUTH) || r->user)
|
||||
{
|
||||
return DECLINED;
|
||||
|
Reference in New Issue
Block a user