Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 832005: Fix use of uninitialized variable when sending alert about missing certificate. Patch by mcmanus, r=bsmith

Browse Source 
git-svn-id: svn://10.0.0.236/trunk@264655 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
bsmith%mozilla.com
2013-01-18 19:31:42 +00:00
parent 885554f879
commit bd1f61704c
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
mozilla/security/nss/lib/ssl/ssl3con.c
View File

@@ -5,7 +5,7 @@
* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
/* $Id: ssl3con.c,v 1.196 2013-01-07 04:11:52 ryan.sleevi%gmail.com Exp $ */
/* $Id: ssl3con.c,v 1.197 2013-01-18 19:31:42 bsmith%mozilla.com Exp $ */
/* TODO(ekr): Implement HelloVerifyRequest on server side. OK for now. */
@@ -8384,8 +8384,10 @@ ssl3_HandleCertificate(sslSocket *ss, SSL3Opaque *b, PRUint32 length)
}
if (!remaining) {
if (!(isTLS && isServer))
if (!(isTLS && isServer)) {
desc = bad_certificate;
goto alert_loser;
}
/* This is TLS's version of a no_certificate alert. */
/* I'm a server. I've requested a client cert. He hasn't got one. */
rv = ssl3_HandleNoCertificate(ss);