ProcessBuffer(): in WOLFSSL_DUAL_ALG_CERTS code path, fall through without disrupting ret, if cert->sapkiOID and cert->sapkiLen are unset.

2026-02-04 01:05:05 +01:00 · 2024-04-03 13:54:57 -05:00
parent 9bfab33726
commit 8511b2dc6b
1 changed files with 4 additions and 0 deletions
--- a/src/ssl.c
+++ b/src/ssl.c
@@ -8096,6 +8096,10 @@ int ProcessBuffer(WOLFSSL_CTX* ctx, const unsigned char* buff,
        keySz = 0;
        /* check alternative key size of cert */
        switch (cert->sapkiOID) {
+            case 0:
+                if (cert->sapkiLen != 0)
+                    ret = NOT_COMPILED_IN;
+                break;
        #ifndef NO_RSA
            #ifdef WC_RSA_PSS
            case RSAPSSk: