commit b422cab052b51ec84758638d6783d6ba4fc60613
author Yanray Wang <yanray.wang@arm.com> Fri Dec 01 16:18:10 2023 +0800
committer Yanray Wang <yanray.wang@arm.com> Fri Dec 01 16:29:21 2023 +0800
tree 2c761a33bab793442939ed3e9b28d925c924927f
parent 10dfe76425a8088a67c5344f4f9f793891fec8ec

tls: check RNG in ssl_conf_check when calling mbedtls_ssl_setup

Signed-off-by: Yanray Wang <yanray.wang@arm.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 6678b71..28be8a6 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -1355,6 +1355,11 @@
     }
 #endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
 
+    if (ssl->conf->f_rng == NULL) {
+        MBEDTLS_SSL_DEBUG_MSG(1, ("no RNG provided"));
+        return MBEDTLS_ERR_SSL_NO_RNG;
+    }
+
     /* Space for further checks */
 
     return 0;