commit 997669aeeba045e8573a1c49f5922f8aa4d4f85f
author Xiaokang Qian <xiaokang.qian@arm.com> Wed Oct 12 14:30:27 2022 +0000
committer Xiaokang Qian <xiaokang.qian@arm.com> Wed Oct 12 14:30:27 2022 +0000
tree 7aeb33bc9e578171255c03e8f1d7f6ea2a37db7b
parent 307a7303fda210f86be5ac04d4a677337ae0b719

Fix heap use-after-free corruption issue

Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 2de5231..a36f5b1 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -258,9 +258,12 @@
     defined(MBEDTLS_SSL_SERVER_NAME_INDICATION)
     if( src->endpoint == MBEDTLS_SSL_IS_CLIENT )
     {
+        int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
         dst->hostname = NULL;
-        return mbedtls_ssl_session_set_hostname( dst,
-                                                 src->hostname );
+        ret = mbedtls_ssl_session_set_hostname( dst,
+                                                src->hostname );
+        if( ret != 0)
+            return ret;
     }
 #endif /* MBEDTLS_SSL_PROTO_TLS1_3 && MBEDTLS_SSL_SERVER_NAME_INDICATION */
 #endif /* MBEDTLS_SSL_SESSION_TICKETS && MBEDTLS_SSL_CLI_C */