Blame SOURCES/socat-1.7.4.1-ipv6-ssl-peername-check-fix.patch
|
 |
0cada9 |
--- socat-orig/socat-1.7.4.1/xio-openssl.c 2021-01-10 04:57:35.000000000 -0800
|
|
|
0cada9 |
+++ socat-1.7.4.1/xio-openssl.c 2021-07-12 03:17:23.772269622 -0700
|
|
|
0cada9 |
@@ -1777,15 +1777,17 @@
|
|
|
0cada9 |
#if WITH_IP6
|
|
|
0cada9 |
case 16: /* IPv6 */
|
|
|
0cada9 |
inet_ntop(AF_INET6, data, aBuffer, sizeof(aBuffer));
|
|
|
0cada9 |
- xioip6_pton(peername, &ip6bin);
|
|
|
0cada9 |
- if (memcmp(data, &ip6bin, sizeof(ip6bin)) == 0) {
|
|
|
0cada9 |
- Debug2("subjectAltName \"%s\" matches peername \"%s\"",
|
|
|
0cada9 |
- aBuffer, peername);
|
|
|
0cada9 |
- ok = 1;
|
|
|
0cada9 |
- } else {
|
|
|
0cada9 |
- Info2("subjectAltName \"%s\" does not match peername \"%s\"",
|
|
|
0cada9 |
- aBuffer, peername);
|
|
|
0cada9 |
- }
|
|
|
0cada9 |
+ if (peername != NULL) {
|
|
|
0cada9 |
+ xioip6_pton(peername, &ip6bin);
|
|
|
0cada9 |
+ if (memcmp(data, &ip6bin, sizeof(ip6bin)) == 0) {
|
|
|
0cada9 |
+ Debug2("subjectAltName \"%s\" matches peername \"%s\"",
|
|
|
0cada9 |
+ aBuffer, peername);
|
|
|
0cada9 |
+ ok = 1;
|
|
|
0cada9 |
+ } else {
|
|
|
0cada9 |
+ Info2("subjectAltName \"%s\" does not match peername \"%s\"",
|
|
|
0cada9 |
+ aBuffer, peername);
|
|
|
0cada9 |
+ }
|
|
|
0cada9 |
+ }
|
|
|
0cada9 |
break;
|
|
|
0cada9 |
#endif
|
|
|
0cada9 |
}
|