From 3da6b8364e767073608d6a63ffefad6c5904ac79 Mon Sep 17 00:00:00 2001 From: Guido Vranken Date: Thu, 28 Jan 2021 18:53:35 +0100 Subject: [PATCH] Prevent dangling pointer in TLSX_Cookie_Use ZD 11603 --- src/tls.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/tls.c b/src/tls.c index d11472115..0df44fc9b 100644 --- a/src/tls.c +++ b/src/tls.c @@ -6374,6 +6374,9 @@ int TLSX_Cookie_Use(WOLFSSL* ssl, byte* data, word16 len, byte* mac, if (mac != NULL) XMEMCPY(&cookie->data + len, mac, macSz); + if (extension->data != NULL) + XFREE(extension->data, ssl->heap, DYNAMIC_TYPE_TLSX); + extension->data = (void*)cookie; extension->resp = (byte)resp;