summaryrefslogtreecommitdiff
path: root/doc/ChangeLog-1.9.3
diff options
context:
space:
mode:
authorAaron Patterson <tenderlove@ruby-lang.org>2021-10-22 10:14:00 -0700
committerKazuki Yamaguchi <k@rhe.jp>2021-10-23 13:38:40 +0900
commit35b9d8d39317cc5ed9eeb11d3ecbb7335b81ed91 (patch)
treee5ccb6595f10c30ffc1df6dfbe7ea547fc2226f8 /doc/ChangeLog-1.9.3
parent47975ece4096cdab16b3f200f93ea2377dfb41ac (diff)
[ruby/openssl] Raise an exception if the IO object passed to SSLSocket isn't a file
SSLSocket#connect eventually calls `GetOpenFile` in order to get the underlying file descriptor for the IO object passed in on initialization. `GetOpenFile` assumes that the Ruby object passed in is a T_FILE object and just casts it to a T_FILE without any checks. If you pass an object that *isn't* a T_FILE to that function, the program will segv. Since we assume the IO object is a file in the `connect` method, this commit adds a `CheckType` in the initialize method to ensure that the IO object is actually a T_FILE. If the object *isn't* a T_FILE, this class will segv on `connect`, so I think this is a backwards compatible change. https://github.com/ruby/openssl/commit/919fa44ec2
Diffstat (limited to 'doc/ChangeLog-1.9.3')
0 files changed, 0 insertions, 0 deletions