Closed Bug 264296 Opened 17 years ago Closed 15 years ago
sslsample maybe crashed when provide an invalid client cert
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705) Build Identifier: NSS3.9 sslsample In sslsample server.c function setupSSLSocket,line 260,as follow: secStatus = SSL_BadCertHook(sslSocket, (SSLBadCertHandler)myBadCertHandler, &certErr); And in sslsample.c function myBadCertHandler line 179,as follow: *(PRErrorCode *)arg = err = PORT_GetError(); I guess when an invalid client cert provide,it will call myBadCertHandler,and set error to arg. But unfortunately,the arg certErr is declared in function setupSSLSocket,when this function exit,the memoryspace allocate for certErr was took back by OS.And when myBadCertHandler was called,it will use an invalid address to set error code. Reproducible: Sometimes Steps to Reproduce: 1. 2. 3.
Assignee: wchang0222 → nelson
Status: UNCONFIRMED → NEW
Ever confirmed: true
QA Contact: bishakhabanerjee → jason.m.reid
QA Contact: jason.m.reid → tools
I have filed bug 359302, which requests that the non-exemplary sslsample source code be expunged from the NSS source tree.
Status: NEW → RESOLVED
Closed: 15 years ago
Priority: -- → P5
Resolution: --- → WONTFIX
Target Milestone: --- → 3.12
Version: unspecified → 3.9
You need to log in before you can comment on or make changes to this bug.