commit 094db7fa162b71c9633fc25465e7c60198dda95c
author Ruslan Ermilov <ru@nginx.com> Tue Sep 25 14:07:59 2018 +0300
committer Ruslan Ermilov <ru@nginx.com> Tue Sep 25 14:07:59 2018 +0300
tree 1de689e3fc4261f44d0e0b33c7ae10948bd5bdff
parent 9d74c4557dd6afe9ed5a29e1fa751baa8ece329a

SSL: fixed unlocked access to sess_id->len.

src/event/ngx_event_openssl.c

diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c
index 3a0e150..7512913 100644
--- a/src/event/ngx_event_openssl.c
+++ b/src/event/ngx_event_openssl.c
@@ -3146,6 +3146,7 @@
     const
 #endif
     u_char                   *p;
+    size_t                    slen;
     uint32_t                  hash;
     ngx_int_t                 rc;
     ngx_shm_zone_t           *shm_zone;
@@ -3201,12 +3202,14 @@
         if (rc == 0) {
 
             if (sess_id->expire > ngx_time()) {
-                ngx_memcpy(buf, sess_id->session, sess_id->len);
+                slen = sess_id->len;
+
+                ngx_memcpy(buf, sess_id->session, slen);
 
                 ngx_shmtx_unlock(&shpool->mutex);
 
                 p = buf;
-                sess = d2i_SSL_SESSION(NULL, &p, sess_id->len);
+                sess = d2i_SSL_SESSION(NULL, &p, slen);
 
                 return sess;
             }