espressif/esp-idf
1
0
Fork 1
mirror of https://github.com/espressif/esp-idf.git synced 2025-07-29 18:27:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'bugfix/mbedtls_dynamic_buffer_crash_on_ssl_server_v4.4' into 'release/v4.4'

Browse Source 
fix(mbedtls): fix ssl server memory leak when enable mbedtls dynamic buffer function(backport v4.4)

See merge request espressif/esp-idf!18166
This commit is contained in:
Mahavir Jain
2022-05-23 11:20:30 +08:00
parent fc8ef9d1c2 81c195fed2
commit 9d2238d6e4
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
components/mbedtls/port/dynamic/esp_mbedtls_dynamic_impl.c
View File

@ -416,7 +416,16 @@ int esp_mbedtls_free_rx_buffer(mbedtls_ssl_context *ssl)
/**
* The previous processing is just skipped, so "ssl->in_msglen = 0"
*/
if (!ssl->in_msgtype) {
if (!ssl->in_msgtype
#if defined(MBEDTLS_SSL_SRV_C)
/**
* The ssl server read ClientHello manually without mbedtls_ssl_read_record(), so in_msgtype is not set and is zero.
* ClientHello has been processed and rx buffer should be freed.
* After processing ClientHello, the ssl state has been changed to MBEDTLS_SSL_SERVER_HELLO.
*/
&& !(ssl->conf->endpoint == MBEDTLS_SSL_IS_SERVER && ssl->state == MBEDTLS_SSL_SERVER_HELLO)
#endif
) {
goto exit;
}