=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/68.html,v retrieving revision 1.58 retrieving revision 1.59 diff -c -r1.58 -r1.59 *** www/68.html 2020/10/08 15:41:27 1.58 --- www/68.html 2020/10/08 15:48:14 1.59 *************** *** 547,553 ****
  • Move state initialization from SSL_clear(3) to ssl3_clear() to ensure that it gets correctly reinitialized across a SSL_set_ssl_method(3) call.
  • Add a custom copy handler for AES keywrap to fix a use-after-free.
  • Avoid an out-of-bounds write in BN_rand(3). !
  • Fix numerous leaks in the UI_dup_* functions. Simplify and tidy up the code in ui_lib.c.
  • Correctly track selected ALPN length to avoid a potential segmentation fault with SSL_get0_alpn_selected(3) when alpn_selected is NULL.
  • Include machine/endian.h gost2814789.c in order to pick up the __STRICT_ALIGNMENT define.
  • Correctly handle ssl_cert_dup() failure in SSL_set_SSL_CTX(3). --- 547,553 ----
  • Move state initialization from SSL_clear(3) to ssl3_clear() to ensure that it gets correctly reinitialized across a SSL_set_ssl_method(3) call.
  • Add a custom copy handler for AES keywrap to fix a use-after-free.
  • Avoid an out-of-bounds write in BN_rand(3). !
  • Fix numerous leaks in the UI_dup_*(3) functions. Simplify and tidy up the code in ui_lib.c.
  • Correctly track selected ALPN length to avoid a potential segmentation fault with SSL_get0_alpn_selected(3) when alpn_selected is NULL.
  • Include machine/endian.h gost2814789.c in order to pick up the __STRICT_ALIGNMENT define.
  • Correctly handle ssl_cert_dup() failure in SSL_set_SSL_CTX(3).