Commit 8d96cda15c for openssl.org

commit 8d96cda15c1087f77e11e80c274b5052645ef3a7
Author: Steve Grubb <ausearch.1@gmail.com>
Date:   Fri Jun 5 11:18:34 2026 -0400

    ssl_lib.c: Add NULL checks for SSL_CONNECTION_FROM_SSL_ONLY() return

    There are 2 places where sc is not checked for NULL before using it. This adds the checks.

    Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
    Reviewed-by: Nikola Pajkovsky <nikolap@openssl.org>
    Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
    Merge-date: Tue Sep 29 16:35:03 2026
    Merged-from: https://github.com/openssl/openssl/pull/31397

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 918f5633cb..238e9d386c 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -5402,6 +5402,8 @@ void SSL_set_accept_state(SSL *s)
     }
 #endif

+    if (sc == NULL)
+        return;
     sc->server = 1;
     sc->shutdown = 0;
     ossl_statem_clear(sc);
@@ -5422,6 +5424,8 @@ void SSL_set_connect_state(SSL *s)
     }
 #endif

+    if (sc == NULL)
+        return;
     sc->server = 0;
     sc->shutdown = 0;
     ossl_statem_clear(sc);