FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

[3.10] gh-156293: Use-after-free for server-side SSLContext with sni_callback (GH-158504) by gpshead · Pull Request #158524 · python/cpython · GitHub

  1. python
  2. cpython

Repository navigation

[3.10] gh-156293: Use-after-free for server-side SSLContext with sni_callback (GH-158504) - #158524

Merged
pablogsal merged 2 commits into
python:3.10from
gpshead:gh-156293-ssl-sni-callback-3.10
Oct 1, 2026
ConversationCommits (2)ChecksFiles changed
Merged

[3.10] gh-156293: Use-after-free for server-side SSLContext with sni_callback (GH-158504)#158524
pablogsal merged 2 commits into
python:3.10from
gpshead:gh-156293-ssl-sni-callback-3.10

Conversation

gpshead commented Sep 30, 2026

Copy link
Copy Markdown
Member

gpshead added 2 commits August 23, 2026 17:45
[3.10] pythongh-156293: ssl: do not call the servername callback thro…
7ab129e 
…ugh a released SSLContext

The servername (SNI) callback located its SSLContext through a borrowed
pointer registered with OpenSSL, which can outlive the SSLContext object.
Look the context up from the SSL object instead, and unregister the
callback when the context is deallocated.

Backport of 87665c9,
adapted to this branch's servername callback code.
[3.10] pythongh-156293: Document sni_callback dispatch after a contex…
5ee05a9 
…t switch
gpshead requested a review from tiran as a code owner September 30, 2026 17:07
gpshead added the 3.10 (EOL) end of life label Sep 30, 2026
bedevere-app Bot mentioned this pull request Sep 30, 2026
Closed
bedevere-app Bot mentioned this pull request Sep 30, 2026
Merged

read-the-docs-community Bot commented Sep 30, 2026

Copy link
Copy Markdown

Documentation build overview

📚 cpython-previews | 🛠️ Build #34858111 | 📁 Comparing 5ee05a9 against main (e580c88)

  🔍 Preview build  

550 files changed · + 19 added · ± 434 modified · - 97 deleted

+ Added

± Modified

- Deleted

pablogsal merged commit ec44b5a into python:3.10 Oct 1, 2026
17 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

tiran Awaiting requested review from tiran tiran is a code owner

Assignees

No one assigned

Labels

3.10 (EOL) end of life release-blocker topic-SSL type-security A security issue

Projects

Release and Deferred blockers 🚫
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

Back | FazBrowse Home | New Git URL