Commit b599ce3b authored by Matt Caswell's avatar Matt Caswell
Browse files

Fix missing NULL checks in CKE processing 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
parent 7acb8b64

ssl/statem/statem_clnt.c

+7 −0
Original line number Diff line number Diff line
@@ -2459,6 +2459,9 @@ static int tls_construct_cke_dhe(SSL *s, WPACKET *pkt, int *al) 
        goto err;



    ckey = ssl_generate_pkey(skey);

    if (ckey == NULL)

        goto err;



    dh_clnt = EVP_PKEY_get0_DH(ckey);



    if (dh_clnt == NULL || ssl_derive(s, ckey, skey, 0) == 0)
@@ -2496,6 +2499,10 @@ static int tls_construct_cke_ecdhe(SSL *s, WPACKET *pkt, int *al) 
    }



    ckey = ssl_generate_pkey(skey);

    if (ckey == NULL) {

        SSLerr(SSL_F_TLS_CONSTRUCT_CKE_ECDHE, ERR_R_MALLOC_FAILURE);

        goto err;

    }



    if (ssl_derive(s, ckey, skey, 0) == 0) {

        SSLerr(SSL_F_TLS_CONSTRUCT_CKE_ECDHE, ERR_R_EVP_LIB);