From 9d5db9c9ab9b9f2f2a5ce9795405e8334cd2ce66 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Wed, 21 Mar 2018 20:19:37 +0000 Subject: Assert that alpn_selected is NULL before we assign it The alpn_selected value in the session should be NULL before we first populate it if this is a new session. We assert to make sure it is. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/5715) --- ssl/statem/extensions_clnt.c | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) (limited to 'ssl/statem/extensions_clnt.c') diff --git a/ssl/statem/extensions_clnt.c b/ssl/statem/extensions_clnt.c index 5c360042ae..e4a5b3cddc 100644 --- a/ssl/statem/extensions_clnt.c +++ b/ssl/statem/extensions_clnt.c @@ -1679,7 +1679,15 @@ int tls_parse_stoc_alpn(SSL *s, PACKET *pkt, unsigned int context, X509 *x, s->ext.early_data_ok = 0; } if (!s->hit) { - /* If a new session then update it with the selected ALPN */ + /* + * This is a new session and so alpn_selected should have been + * initialised to NULL. We should update it with the selected ALPN. + */ + if (!ossl_assert(s->session->ext.alpn_selected == NULL)) { + SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_ALPN, + ERR_R_INTERNAL_ERROR); + return 0; + } s->session->ext.alpn_selected = OPENSSL_memdup(s->s3->alpn_selected, s->s3->alpn_selected_len); if (s->session->ext.alpn_selected == NULL) { -- cgit v1.2.3