fix: security issues — path traversal, TLS hostname, SUID, OOM, stack overflow

2026-07-20 21:24:47 +02:00
parent 9dd925a87d
commit 224e7e8599
6 changed files with 68 additions and 4 deletions
@@ -168,6 +168,14 @@ bool client_connect_tls(Client* client, char* host, int port, const char* cert_p
    client->ssl_ctx = NULL;
    return false;
  }
+
+  // Set SNI and enable hostname verification
+  SSL_set_tlsext_host_name(ssl, host);
+  X509_VERIFY_PARAM *param = SSL_get0_param(ssl);
+  if (param) {
+    X509_VERIFY_PARAM_set1_host(param, host, 0);
+  }
+
  client->ssl = ssl;
  io_set_ssl(ssl);
  return true;