oauth: fix segfault when using OIDCOAuthVerifySharedKeys; closes #1373

regression since 2.4.16; thanks @contryboy

Signed-off-by: Hans Zandbelt <[email protected]>

Author: zandbelt

ChangeLog

@@ -1,3 +1,6 @@
+12/13/2025
+- oauth: fix segfault when using OIDCOAuthVerifySharedKeys, regression since 2.4.16; closes #1373; thanks @contryboy
+
 12/08/2025
 - jwk: fix parsi8ng RSA JWKs with only an "x5c" parameter (i.e. no "n" and "e")
 - bump to 2.4.19.1dev

src/cfg/oauth.c

@@ -299,8 +299,7 @@ const char *oidc_cmd_oauth_verify_shared_keys_set(cmd_parms *cmd, void *struct_p
 	char *use = NULL;
 
 	oidc_cfg_t *cfg = (oidc_cfg_t *)ap_get_module_config(cmd->server->module_config, &auth_openidc_module);
-	int offset = (int)(long)cmd->info;
-	apr_hash_t **shared_keys = (apr_hash_t **)((char *)cfg + offset);
+	apr_hash_t **shared_keys = &cfg->oauth->verify_shared_keys;
 
 	char *kid = NULL, *secret = NULL;
 	int key_len = 0;