Skip to content

vtls: check final cfilter node in find_ssl_filter - #19229

Closed
MegaManSec wants to merge 1 commit into
curl:masterfrom
MegaManSec:loop
Closed

vtls: check final cfilter node in find_ssl_filter#19229
MegaManSec wants to merge 1 commit into
curl:masterfrom
MegaManSec:loop

Conversation

@MegaManSec

Copy link
Copy Markdown
Contributor

find_ssl_filter used while(cf && cf->next) and skipped the last node. If the SSL filter was last, channel binding lookup failed and we returned CURLE_BAD_FUNCTION_ARGUMENT. Switch to while(cf) so the tail is examined.

This bug was found with ZeroPath.

find_ssl_filter used while(cf && cf->next) and skipped the last node.
If the SSL filter was last, channel binding lookup failed and we returned
CURLE_BAD_FUNCTION_ARGUMENT. Switch to while(cf) so the tail is examined.

This bug was found with ZeroPath.
@github-actions github-actions Bot added the TLS label Oct 24, 2025
@testclutch

Copy link
Copy Markdown

Analysis of PR #19229 at 6e8fa451:

Test 776 failed, which has NOT been flaky recently, so there could be a real issue in this PR. Note that this test has failed in 12 different CI jobs (the link just goes to one of them).

Generated by Testclutch

@bagder bagder closed this in 0d5e242 Nov 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

2 participants