Code

Fix CVE-2024-5535#634

Code

Merged

InfoHunter merged 9 commits intoTongsuo-Project:masterTongsuo-Project/Tongsuo:masterfrom dongbeiouba:fix/CVE-2024-5535dongbeiouba/Tongsuo:fix/CVE-2024-5535Copy head branch name to clipboardAug 19, 2024

+1,050-271

Commits

Commits on Jul 12, 2024

• Fix SSL_select_next_proto

  Show description for 036d0f6
  dongbeiouba

  committed
  036d0f6

  Copy full SHA for 036d0f6

Commits on Jul 15, 2024

• More correctly handle a selected_len of 0 when processing NPN

  Show description for 1137d9b
  dongbeiouba

  committed
  1137d9b

  Copy full SHA for 1137d9b

• Add a test for SSL_select_next_proto

  Show description for 7f4500f
  dongbeiouba

  committed
  7f4500f

  Copy full SHA for 7f4500f

• Allow an empty NPN/ALPN protocol list in the tests

  Show description for e50a6b6
  dongbeiouba

  committed
  e50a6b6

  Copy full SHA for e50a6b6

• Correct return values for tls_construct_stoc_next_proto_neg

  Show description for 98ff83c
  dongbeiouba

  committed
  98ff83c

  Copy full SHA for 98ff83c

• Add ALPN validation in the client

  Show description for e1b2a77
  dongbeiouba

  committed
  e1b2a77

  Copy full SHA for e1b2a77

• Add explicit testing of ALN and NPN in sslapitest

  Show description for 8906cf3
  dongbeiouba

  committed
  8906cf3

  Copy full SHA for 8906cf3

• Add a test for an empty NextProto message

  Show description for 6d7e26f
  dongbeiouba

  committed
  6d7e26f

  Copy full SHA for 6d7e26f

• Add a CHANGES entry for CVE-2024-5535

  dongbeiouba

  committed
  9573eb9

  Copy full SHA for 9573eb9