From f18a41c84bb573607eaab9fec0c070cd159493f0 Mon Sep 17 00:00:00 2001
From: Valentin Bartenev <vbart@nginx.com>
Date: Wed, 24 Mar 2021 16:38:05 +0300
Subject: Certficates: fixed counting DNS SAN entries.

Previously, entries of any type were counted during object allocation
but only DNS type entries were actually processed.  As a result,
if some certificate entries had another type, returning information
about the certificate caused uninitialized memory access.
---
 docs/changes.xml | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'docs/changes.xml')

diff --git a/docs/changes.xml b/docs/changes.xml
index 22adc2dd..ad963c40 100644
--- a/docs/changes.xml
+++ b/docs/changes.xml
@@ -37,6 +37,13 @@ Linux, and all uploaded certificate bundles were forgotten after restart.
 </para>
 </change>
 
+<change type="bugfix">
+<para>
+the controller process could crash while requesting information about a
+certificate with a non-DNS SAN entry.
+</para>
+</change>
+
 <change type="bugfix">
 <para>
 the Ruby module didn't respect user locale for defaults in the Encoding class.
-- 
cgit