File 1098-ssl-Fix-version-assertion.patch of Package erlang
From 031e4d02754628a3b9f022c3f8f4a1e27a02c3f4 Mon Sep 17 00:00:00 2001
From: Ingela Anderton Andin <ingela@erlang.org>
Date: Tue, 8 Oct 2024 15:54:28 +0200
Subject: [PATCH] ssl: Fix version assertion
Make sure assertion is on function clause only and not on selected version
closes #8908
---
lib/ssl/src/tls_handshake.erl | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lib/ssl/src/tls_handshake.erl b/lib/ssl/src/tls_handshake.erl
index 52d6f0bbce..6377edc021 100644
--- a/lib/ssl/src/tls_handshake.erl
+++ b/lib/ssl/src/tls_handshake.erl
@@ -242,8 +242,8 @@ hello(#client_hello{client_version = _ClientVersion,
#{versions := Versions = [Version |_]} = SslOpts,
Info, Renegotiation) when Version >= {3,3} ->
try
- Version = ssl_handshake:select_supported_version(ClientVersions, Versions),
- do_hello(Version, Versions, CipherSuites, Hello, SslOpts, Info, Renegotiation)
+ SelectedVersion = ssl_handshake:select_supported_version(ClientVersions, Versions),
+ do_hello(SelectedVersion, Versions, CipherSuites, Hello, SslOpts, Info, Renegotiation)
catch
error:_ ->
throw(?ALERT_REC(?FATAL, ?HANDSHAKE_FAILURE, malformed_handshake_data))
--
2.43.0