From 4ab3d315434d3d59f36da7271aa2c493e692d472 Mon Sep 17 00:00:00 2001 From: Christophe Jaillet Date: Mon, 14 May 2018 20:51:31 +0000 Subject: [PATCH] I don't know if 'c' can be NULL here, but we should not dereference it before checking. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1831591 13f79535-47bb-0310-9956-ffa450edef68 --- modules/ssl/ssl_engine_kernel.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/modules/ssl/ssl_engine_kernel.c b/modules/ssl/ssl_engine_kernel.c index e310c09aa3..5385dc516a 100644 --- a/modules/ssl/ssl_engine_kernel.c +++ b/modules/ssl/ssl_engine_kernel.c @@ -2552,7 +2552,7 @@ int ssl_callback_alpn_select(SSL *ssl, void *arg) { conn_rec *c = (conn_rec*)SSL_get_app_data(ssl); - SSLConnRec *sslconn = myConnConfig(c); + SSLConnRec *sslconn; apr_array_header_t *client_protos; const char *proposed; size_t len; @@ -2563,6 +2563,7 @@ int ssl_callback_alpn_select(SSL *ssl, if (c == NULL) { return SSL_TLSEXT_ERR_OK; } + sslconn = myConnConfig(c); if (inlen == 0) { /* someone tries to trick us? */ -- 2.50.1