=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/68.html,v retrieving revision 1.58 retrieving revision 1.59 diff -u -r1.58 -r1.59 --- www/68.html 2020/10/08 15:41:27 1.58 +++ www/68.html 2020/10/08 15:48:14 1.59 @@ -547,7 +547,7 @@
  • Move state initialization from SSL_clear(3) to ssl3_clear() to ensure that it gets correctly reinitialized across a SSL_set_ssl_method(3) call.
  • Add a custom copy handler for AES keywrap to fix a use-after-free.
  • Avoid an out-of-bounds write in BN_rand(3). -
  • Fix numerous leaks in the UI_dup_* functions. Simplify and tidy up the code in ui_lib.c. +
  • Fix numerous leaks in the UI_dup_*(3) functions. Simplify and tidy up the code in ui_lib.c.
  • Correctly track selected ALPN length to avoid a potential segmentation fault with SSL_get0_alpn_selected(3) when alpn_selected is NULL.
  • Include machine/endian.h gost2814789.c in order to pick up the __STRICT_ALIGNMENT define.
  • Correctly handle ssl_cert_dup() failure in SSL_set_SSL_CTX(3).