commit 3afdf36de704181cd12390363e24924e2f73b26f
author Jerry Yu <jerry.h.yu@arm.com> Wed Jul 20 17:34:14 2022 +0800
committer Jerry Yu <jerry.h.yu@arm.com> Wed Jul 20 18:12:08 2022 +0800
tree 6e3ecd58fbfd210eaab2c27a376d9a1a177f7b00
parent 9750f813a76635694563fa98af3d259d3018f210

Add hash length check

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index 672cb0f..183b6ee 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -2036,8 +2036,12 @@
 
     psa_hash_alg = mbedtls_psa_translate_md( ciphersuite_info->mac );
     hash_length = PSA_HASH_LENGTH( psa_hash_alg );
-    if( hash_length == -1 )
+    if( hash_length == -1 ||
+        ( size_t )hash_length > sizeof( session->resumption_key ) )
+    {
         return( MBEDTLS_ERR_SSL_INTERNAL_ERROR );
+    }
+
 
     MBEDTLS_SSL_DEBUG_BUF( 3, "resumption_master_secret",
                            session->app_secrets.resumption_master_secret,