From 091d848838a29924501322e44e71e7e6db850f00 Mon Sep 17 00:00:00 2001 From: david Date: Mon, 28 May 2012 17:44:10 +0000 Subject: [PATCH] Prevent a null pointer dereference in nse_nsock_get_ssl. This could be provoked by a script calling nmap.get_ssl_certificate on an unconnected socket. --- nse_nsock.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nse_nsock.cc b/nse_nsock.cc index 1ff0a0308..415be50bc 100644 --- a/nse_nsock.cc +++ b/nse_nsock.cc @@ -709,7 +709,7 @@ SSL *nse_nsock_get_ssl (lua_State *L) { nse_nsock_udata *nu = check_nsock_udata(L, 1, 0); - if (!nsi_checkssl(nu->nsiod)) + if (nu->nsiod == NULL || !nsi_checkssl(nu->nsiod)) luaL_argerror(L, 1, "not a SSL socket"); return (SSL *) nsi_getssl(nu->nsiod);