commit d886d9f93cffeb6410d27677baac54d4b4e6d8cc
author Andrzej Kurek <andrzej.kurek@arm.com> Mon Dec 14 06:01:43 2020 -0500
committer Andrzej Kurek <andrzej.kurek@arm.com> Tue Dec 15 15:43:12 2020 -0500
tree bd5845fbf78fcae0c525b71718cf1be19820b851
parent 9627202d3ae7f47ec0fb1b299433fb556a261622

Fix freeing uninitialized fields from the ssl context

Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index f5d663e..038e581 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -12060,9 +12060,15 @@
 #if defined(MBEDTLS_SSL_FREE_SERVER_CERTIFICATE) && \
     defined(MBEDTLS_X509_CRT_PARSE_C) && \
     defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE)
-    mbedtls_x509_crt_free( ssl->session_negotiate->peer_cert );
-    mbedtls_free( ssl->session->peer_cert );
-    ssl->session->peer_cert = NULL;
+    if( ssl->session_negotiate )
+    {
+        mbedtls_x509_crt_free( ssl->session_negotiate->peer_cert );
+    }
+    if( ssl->session )
+    {
+        mbedtls_free( ssl->session->peer_cert );
+        ssl->session->peer_cert = NULL;
+    }
 #endif /* MBEDTLS_SSL_FREE_SERVER_CERTIFICATE */
 
 #if defined(MBEDTLS_DHM_C)