compile error in openssl path validation commit

Doug Smith Doug.Smith at ezurio.com
Fri Aug 21 09:48:57 PDT 2026


All,

The commit for openssl engine path validation has a compile error -- missing a bracket.
https://git.w1.fi/cgit/hostap/commit/?id=422b9653e4e58b4dbe3fe770cea31afc13fab7db

Also missing mods in the Makefile(s) to enable the compile switch from the build .config.

Regards,
Doug

>From 856333b9b73971aa02b2f9f75d3b67676d97be4f Mon Sep 17 00:00:00 2001
From: Doug Smith <doug.smith at ezurio.com>
Date: Fri, 21 Aug 2026 11:58:39 -0400
Subject: [PATCH] OpenSSL: fix compile error in PKCS#11/OpenSC path validation

Fix compile error due to missing bracket.
introduced in commit 422b9653e4e5("OpenSSL: Validate PKCS#11/OpenSC engine and module paths before loading")
---
 src/crypto/tls_openssl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c
index b14b12360..4cadfa46e 100644
--- a/src/crypto/tls_openssl.c
+++ b/src/crypto/tls_openssl.c
@@ -1086,7 +1086,7 @@ static int tls_engine_path_trusted(const char *path, char *real_path)

        os_strlcpy(dir, real_path, sizeof(dir));
        slash = dir;
-       while ((next = os_strchr(slash + 1, '/')) {
+       while ((next = os_strchr(slash + 1, '/'))) {
                *next = '\0';
                if (stat(dir, &st) != 0 || !S_ISDIR(st.st_mode) ||
                    st.st_uid != 0 || (st.st_mode & (S_IWGRP | S_IWOTH))) {
--
2.34.1


THE INFORMATION CONTAINED IN THIS DOCUMENT IS OF A PROPRIETARY NATURE AND IS INTENDED TO BE KEPT CONFIDENTIAL BETWEEN THE SENDER AND THE INTENDED RECIPIENT. IT MAY NOT BE REPRODUCED OR USED WITHOUT EXPRESS WRITTEN PERMISSION OF EZURIO



More information about the Hostap mailing list