From a5963b4b9f89cdfa0384dfa63adbce698284a9a7 Mon Sep 17 00:00:00 2001
From: John Bland <john.bland@wolfssl.com>
Date: Tue, 26 Sep 2023 19:20:01 -0400
Subject: [PATCH] free the innerClientHello since it may be previously

allocated if an hrr happened
---
 src/tls13.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/tls13.c b/src/tls13.c
index 480959b27..613bac616 100644
--- a/src/tls13.c
+++ b/src/tls13.c
@@ -4540,6 +4540,11 @@ int SendTls13ClientHello(WOLFSSL* ssl)
         /* set the type to inner */
         args->ech->type = ECH_TYPE_INNER;
 
+        /* innerClientHello may already exist from hrr, free if it does */
+        if (args->ech->innerClientHello != NULL) {
+            XFREE(args->ech->innerClientHello, ssl->heap,
+                DYNAMIC_TYPE_TMP_BUFFER);
+        }
         /* allocate the inner */
         args->ech->innerClientHello =
             (byte*)XMALLOC(args->ech->innerClientHelloLen - args->ech->hpke->Nt,