tree 72a91d2bcff58902adcfb7ab344225ec33d6bef5
parent 6bc115f83bd2d6593efca4adccd6655cd3b2e7cd
author Maxim Dounin <mdounin@mdounin.ru> 1503412572 +0300
committer Maxim Dounin <mdounin@mdounin.ru> 1503412572 +0300

SSL: fixed possible use-after-free in $ssl_server_name.

The $ssl_server_name variable used SSL_get_servername() result directly,
but this is not safe: it references a memory allocation in an SSL
session, and this memory might be freed at any time due to renegotiation.
Instead, copy the name to memory allocated from the pool.