tree 9d528ed1a05e9ea22a3da73604623e034163e2b0
parent 0c1ed84258101607d8edea561e2457044074b1e6
author Janos Follath <janos.follath@arm.com> 1562227898 +0100
committer Janos Follath <janos.follath@arm.com> 1562227898 +0100

Fix zero-length seed or label in TLS 1.2 PRF

The psa_tls12_prf_set_seed() and psa_tls12_prf_set_label() functions did
not work on platforms where malloc(0) returns NULL.

It does not affect the TLS use case but these PRFs are used in other
protocols as well and might not be used the same way. For example EAP
uses the TLS PRF with an empty secret. (This would not trigger the bug,
but is a strong indication that it is not safe to assume that certain
inputs to this function are not zero length.)

The conditional block includes the memcpy() call as well to avoid
passing a NULL pointer as a parameter resulting in undefined behaviour.

The current tests are already using zero length label and seed, there is
no need to add new test for this bug.