]> git.kaiwu.me - haproxy.git/commit
BUG/MINOR: ssl: copy curves, sigalgs and client_sigalgs in srv_ssl_settings_cpy()
authorWilliam Lallemand <wlallemand@irq6.net>
Sun, 27 Sep 2026 15:17:58 +0000 (15:17 +0000)
committerWilliam Lallemand <wlallemand@irq6.net>
Sun, 27 Sep 2026 15:44:17 +0000 (17:44 +0200)
commitf9cc8a3fea6484ee375d36782ad7b5a391f3d408
treecc9f561ccf991a7046dd0fc382cc4fdd3ec9f7a4
parent9e7c5d245f60e6cd8828dc20e973762184f02a63
BUG/MINOR: ssl: copy curves, sigalgs and client_sigalgs in srv_ssl_settings_cpy()

When a server inherits SSL settings from default-server, the curves,
sigalgs and client_sigalgs fields were not copied despite being
allocated by ssl-default-server-* keywords. This causes use-after-free
when the original ssl_ctx is destroyed while another reference still
holds the pointer.

Add strdup() calls guarded by the same OpenSSL API version checks
used elsewhere in the copy function.

Fixes issue #3506.

This change is should be backported to all supported branches.
src/server.c