From f637004037a11bc04682f54571e3ff11d48d8e36 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Fri, 24 Feb 2017 12:45:37 +0000 Subject: Only accept early_data if the negotiated ALPN is the same Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2737) --- ssl/ssl_sess.c | 1 + 1 file changed, 1 insertion(+) (limited to 'ssl/ssl_sess.c') diff --git a/ssl/ssl_sess.c b/ssl/ssl_sess.c index be3c4c3526..cc9eeadc12 100644 --- a/ssl/ssl_sess.c +++ b/ssl/ssl_sess.c @@ -791,6 +791,7 @@ void SSL_SESSION_free(SSL_SESSION *ss) #ifndef OPENSSL_NO_SRP OPENSSL_free(ss->srp_username); #endif + OPENSSL_free(ss->ext.alpn_selected); CRYPTO_THREAD_lock_free(ss->lock); OPENSSL_clear_free(ss, sizeof(*ss)); } -- cgit v1.2.3