[openssl/openssl] f65d0f: doc: clarify SSL_SESSION ownership in PSK use sess...

[kovan]

Branch: refs/heads/openssl-3.3
Home: https://github.com/openssl/openssl
Commit: f65d0f261ab1c4359bcedee615aad26a7e36683d
https://github.com/openssl/openssl/commit/f65d0f261ab1c4359bcedee615aad26a7e36683d
Author: kovan <xau...@gmail.com>
Date: 2026-02-13 (Fri, 13 Feb 2026)

Changed paths:
M doc/man3/SSL_CTX_set_psk_client_callback.pod

Log Message:
-----------
doc: clarify SSL_SESSION ownership in PSK use session callback

Document that when the psk_use_session callback is invoked multiple times
and wishes to return the same SSL_SESSION pointer, it must call
SSL_SESSION_up_ref() first since ownership is transferred on each call.
This prevents use-after-free errors from incorrect callback implementations.

Fixes #28267

Co-Authored-By: Claude Opus 4.5 <nor...@anthropic.com>

Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
MergeDate: Fri Feb 13 14:36:50 2026
(Merged from https://github.com/openssl/openssl/pull/29771)

(cherry picked from commit 6d646a94af5d604cabff9005bd6bf8475a635b75)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications