commit de081ce75c1e5a64fcaf6651858e51da7479b104
author Glenn Strauss <gstrauss@gluelogic.com> Mon Dec 20 01:43:17 2021 -0500
committer Glenn Strauss <gstrauss@gluelogic.com> Tue Jan 11 20:07:44 2022 -0500
tree c4a8fbaa43c953cc4b0df4385b26c8ffb31d712e
parent 8b3f26a5ac38d4fdccbc5c5366229f3e01dafcc0

Reset dhm_P and dhm_G if config call repeated

Reset dhm_P and dhm_G if call to mbedtls_ssl_config_defaults() repeated
to avoid leaking memory.

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 2e6469d..c7265f1 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -4632,6 +4632,9 @@
 {
     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
 
+    mbedtls_mpi_free( &conf->dhm_P );
+    mbedtls_mpi_free( &conf->dhm_G );
+
     if( ( ret = mbedtls_mpi_read_binary( &conf->dhm_P, dhm_P, P_len ) ) != 0 ||
         ( ret = mbedtls_mpi_read_binary( &conf->dhm_G, dhm_G, G_len ) ) != 0 )
     {
@@ -4647,6 +4650,9 @@
 {
     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
 
+    mbedtls_mpi_free( &conf->dhm_P );
+    mbedtls_mpi_free( &conf->dhm_G );
+
     if( ( ret = mbedtls_mpi_copy( &conf->dhm_P, &dhm_ctx->P ) ) != 0 ||
         ( ret = mbedtls_mpi_copy( &conf->dhm_G, &dhm_ctx->G ) ) != 0 )
     {