FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

[3.11] gh-156293: Use-after-free for server-side SSLContext with sni_callback (GH-158504) by gpshead · Pull Request #158523 · python/cpython · GitHub

  1. python
  2. cpython

Repository navigation

[3.11] gh-156293: Use-after-free for server-side SSLContext with sni_callback (GH-158504) - #158523

Merged
pablogsal merged 2 commits into
python:3.11from
gpshead:gh-156293-ssl-sni-callback-3.11
Oct 1, 2026
ConversationCommits (2)ChecksFiles changed
Merged

[3.11] gh-156293: Use-after-free for server-side SSLContext with sni_callback (GH-158504)#158523
pablogsal merged 2 commits into
python:3.11from
gpshead:gh-156293-ssl-sni-callback-3.11

Conversation

gpshead commented Sep 30, 2026 •
edited by bedevere-app Bot
Loading

Copy link
Copy Markdown
Member

gpshead added 2 commits August 23, 2026 17:45
[3.11] pythongh-156293: ssl: do not call the servername callback thro…
64d5656 
…ugh a released SSLContext

The servername (SNI) callback located its SSLContext through a borrowed
pointer registered with OpenSSL, which can outlive the SSLContext object.
Look the context up from the SSL object instead, and unregister the
callback when the context is deallocated.

Backport of 87665c9,
adapted to this branch's servername callback code.
[3.11] pythongh-156293: Document sni_callback dispatch after a contex…
731acdf 
…t switch
gpshead added release-blocker 3.11 only security fixes labels Sep 30, 2026
bedevere-app Bot mentioned this pull request Sep 30, 2026
Closed
bedevere-app Bot mentioned this pull request Sep 30, 2026
Merged
bedevere-app Bot added topic-SSL type-security A security issue labels Sep 30, 2026

read-the-docs-community Bot commented Sep 30, 2026

Copy link
Copy Markdown

Documentation build overview

📚 cpython-previews | 🛠️ Build #34858097 | 📁 Comparing 731acdf against main (e580c88)

  🔍 Preview build  

534 files changed · + 18 added · ± 432 modified · - 84 deleted

+ Added

± Modified

- Deleted

pablogsal merged commit b12968c into python:3.11 Oct 1, 2026
30 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

3.11 only security fixes release-blocker topic-SSL type-security A security issue

Projects

Release and Deferred blockers 🚫
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

Back | FazBrowse Home | New Git URL