[openssl/openssl] 07b2d2: doc: clarify SSL_SESSION ownership in PSK use sess...

[kovan]

Branch: refs/heads/openssl-3.6
Home: https://github.com/openssl/openssl
Commit: 07b2d21b8edc3a3359de279d6d4ce8808643379c
https://github.com/openssl/openssl/commit/07b2d21b8edc3a3359de279d6d4ce8808643379c
Author: kovan <xau...@gmail.com>
Date: 2026-02-13 (Fri, 13 Feb 2026)

Changed paths:
M doc/man3/SSL_CTX_set_psk_client_callback.pod

Log Message:
-----------
doc: clarify SSL_SESSION ownership in PSK use session callback

Document that when the psk_use_session callback is invoked multiple times
and wishes to return the same SSL_SESSION pointer, it must call
SSL_SESSION_up_ref() first since ownership is transferred on each call.
This prevents use-after-free errors from incorrect callback implementations.

Fixes #28267

Co-Authored-By: Claude Opus 4.5 <nor...@anthropic.com>

Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
MergeDate: Fri Feb 13 14:36:50 2026
(Merged from https://github.com/openssl/openssl/pull/29771)

(cherry picked from commit 6d646a94af5d604cabff9005bd6bf8475a635b75)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications