TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-03-31 17:51:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6523 from daverodgman/fix_ssl_zeroize-2.28

Browse Source 
Fix zeroization at NULL pointer - 2.28 backport
This commit is contained in:
Dave Rodgman
2022-11-01 20:50:33 +00:00
committed by GitHub
parent a1ea28fc40 febe14e6e0
commit 35e2b2b2bd
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog.d/fix_zeroization.txt Normal file
View File

@@ -0,0 +1,3 @@
Bugfix
* Fix possible crash in TLS PRF code, if a failure to allocate memory occurs.
Reported by Michael Madsen in #6516.

4
library/ssl_tls.c
View File

@@ -760,7 +760,9 @@ static int tls_prf_generic( mbedtls_md_type_t md_type,
exit:
mbedtls_md_free( &md_ctx );
mbedtls_platform_zeroize( tmp, tmp_len );
if ( tmp != NULL )
mbedtls_platform_zeroize( tmp, tmp_len );
mbedtls_platform_zeroize( h_i, sizeof( h_i ) );
mbedtls_free( tmp );