Avoid potential NULL dereference.
May happen with a faulty configuration (eg no allowed curve but trying to use
ECDHE key exchange), but not trigger able remotely.
(Found with Clang's scan-build.)
diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index c5e1c4e..09431ce 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -2647,7 +2647,6 @@
* } ServerECDHParams;
*/
const mbedtls_ecp_curve_info **curve = NULL;
-#if defined(MBEDTLS_ECP_C)
const mbedtls_ecp_group_id *gid;
/* Match our preference list against the offered curves */
@@ -2657,11 +2656,7 @@
goto curve_matching_done;
curve_matching_done:
-#else
- curve = ssl->handshake->curves;
-#endif
-
- if( *curve == NULL )
+ if( curve == NULL || *curve == NULL )
{
MBEDTLS_SSL_DEBUG_MSG( 1, ( "no matching curve for ECDHE" ) );
return( MBEDTLS_ERR_SSL_NO_CIPHER_CHOSEN );