commit 49221900b0c8edd214902014281203f297290fbb
author Ronald Cron <ronald.cron@arm.com> Wed Feb 21 13:39:14 2024 +0100
committer Ronald Cron <ronald.cron@arm.com> Wed Feb 21 14:37:52 2024 +0100
tree 468d404f12d13270df362ae0ddb48d8507dce115
parent 24da9917a6f57713be8e930a4d21a618c7fed733

tls13: write_early_data: Add endpoint check

Return in error of the API is not called
from a client endpoint.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>

library/ssl_msg.c

diff --git a/library/ssl_msg.c b/library/ssl_msg.c
index f3bb323..68f5cf1 100644
--- a/library/ssl_msg.c
+++ b/library/ssl_msg.c
@@ -6072,6 +6072,10 @@
         return MBEDTLS_ERR_SSL_BAD_INPUT_DATA;
     }
 
+    if (conf->endpoint != MBEDTLS_SSL_IS_CLIENT) {
+        return MBEDTLS_ERR_SSL_BAD_INPUT_DATA;
+    }
+
     if ((!mbedtls_ssl_conf_is_tls13_enabled(conf)) ||
         (conf->transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) ||
         (conf->early_data_enabled != MBEDTLS_SSL_EARLY_DATA_ENABLED)) {